Privacy Policy
We, Dubai Scent GmbH, Feldstrasse 21, 8902 Urdorf, operate the website www.dubaiscent.ch as well as the associated online shop and are the provider of the products offered on the website. We are considered the data controller for the collection, use, and processing of your data.
Below, we explain whether and how we process your data:
Data Processing
We process only personal data that we collect directly through our website, associated applications, external platforms, so-called "landing pages," or in the context of the business relationship with our customers and other business partners. Processing occurs only when there is explicit consent or a legal basis, such as for contract performance, fulfillment of legal obligations, or based on legitimate interests.
In the context of the consent you have given, we will process your data only within the limits of that consent, unless one of the following legal bases applies. We explicitly inform you that you can withdraw your consent at any time, although a previously completed lawful processing action is not affected by the withdrawal.
Legal Bases for Data Processing
The following legal bases are possible:
- Consent of the data subject;
- Fulfillment of a contract with the data subject as a contractual party or necessary pre-contractual measures at the request of the data subject;
- Fulfillment of necessary legal obligations of our company;
- Performance or exercise of a task in the public interest;
- Legitimate interests of our company, provided that the interests, rights, and freedoms of the data subject do not outweigh them.
Storage and Deletion of Data
We delete personal data as soon as the purpose for its collection has been fulfilled and there is no further need for its storage. However, there are cases where we are legally required to store data for a longer period, especially in areas like contract law, tax law, and commercial bookkeeping. For example, business documents, contracts, and accounting records must be kept for 10 years.
Personal data that is stored exclusively for legal reasons and is no longer needed for providing our services will be blocked and used only for invoicing and tax purposes.
Sharing Data with Third Parties
In the context of order processing, it may be necessary to use third-party services. This may require the transfer of data to external service providers for contractual performance. The legal bases for this data transfer are the same as for lawful processing, as explained in the previous section. We ensure through contractual agreements that third parties involved in data processing comply with privacy regulations. Additionally, we may be required by administrative or judicial orders to disclose data to state authorities or third parties.
Provision of Our Services and Logfile Creation
Our system automatically collects and stores information in so-called logfiles as soon as you access our website. This includes the following information:
- Browser type and version;
- Operating system;
- IP address;
- Internet Service Provider;
- Date and time.
The data mentioned above cannot be directly attributed to any individual and is not merged with other personal data, but remains in our system. The collection and storage of this data in logfiles is based on our company’s legitimate interests, particularly to ensure the functionality and security of our services and to optimize them. The logfiles are automatically deleted after the end of each session.
The collection and storage of your data in logfiles is essential for the operation of our website, and therefore, there is no possibility to object to this process.
Cookies, Tracking, and Other Technologies
We use cookies and similar technologies on our website. Cookies are small text files stored by your browser, which allow unique identification of your browser during a subsequent visit to our website. They store and transmit display settings as well as login information to make our website user-friendly and secure. The use of cookies is based on our company’s legitimate interests to optimize our website.
You have control over the use of cookies: By adjusting your browser settings, you can disable or limit the transfer of cookies and delete already stored cookies at any time. However, please note that disabling cookies may restrict the functionality of our services.
When visiting our website, you will be informed through a cookie banner where you can give your consent to the use of cookies. This consent is the legal basis for the use of cookies necessary for the full use of our services.
Used Tools, Applications, and Other Technologies
We use Facebook plug-ins on our website, operated by Facebook Inc., USA. These plug-ins are recognizable by the Facebook logos, the "Like" button, or the "Share" button. An overview of Facebook plug-ins can be found at: https://developers.facebook.com/docs/plugins.
When visiting our website, each plug-in establishes a direct connection between your browser and Facebook servers, allowing Facebook to receive information about your page visit with your IP address, even if you are not logged into Facebook or do not have a Facebook account. This data is stored in the USA. If you are logged into Facebook during your website visit, Facebook may associate the visit with your Facebook profile.
Facebook can use this data for purposes such as advertising, market research, or customizing advertisements. As website operators, we have no control over this data processing. To avoid such association, please log out of Facebook before visiting our website. For more information on Facebook’s privacy policy, please visit: https://www.facebook.com/about/privacy.
Google Analytics
We use Google Analytics, a web analytics service from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses cookies stored on your computer to analyze your use of our website. The information generated by the cookie (such as browser type, operating system, IP address, referrer URL) is usually transmitted to and stored on a Google-owned server in the USA.
On our behalf, Google uses the stored information to evaluate your use of our website, generate reports on website activity, and provide additional services related to website and internet usage.
By changing your browser settings, you have the option to disable or limit the transmission of cookies. You can also delete stored cookies at any time through your browser settings, which can also be done automatically. Please note that disabling cookies may result in certain services of our website no longer being available.
We would like to point out that our use of Google Analytics requires your consent, which constitutes the legal basis for its use. You can give your consent through the cookie banner. Additionally, our company has a legitimate interest in using Google Analytics.
Furthermore, you can prevent the collection of information generated by the cookie regarding your use of our website by Google and its processing by Google. A browser add-on for deactivating Google Analytics has been developed and can be downloaded and installed directly from Google at: http://tools.google.com/dlpage/gaoptout?hl=en. Further information regarding Google Analytics can be found in the Google Analytics terms (https://marketingplatform.google.com/about/analytics/terms/en/), the Google Analytics help (https://support.google.com/analytics/answer/6004245?hl=en), and the related privacy policy (https://policies.google.com).
We use so-called social plug-ins from Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA, on our website. These plug-ins are recognizable by the Instagram logo or the "camera" button on our website. When you visit our website, the respective plug-in establishes a connection between your browser and Instagram's server. Regardless of whether you are logged into Instagram or have an Instagram account, Instagram will receive information that you have visited our website with your IP address. This information is stored on the aforementioned server in the USA. If you are logged into Instagram during your visit to our website, Instagram can associate the visit with your profile.
If you do not want Instagram to directly associate the data collected on our website with your account, you must log out of Instagram before visiting our website. The loading of Instagram plug-ins can also be fully prevented by using a browser add-on.
For information regarding the purpose and scope of data collection, further processing, and use of your data by Instagram, as well as your rights and settings options, you can consult the respective privacy notices of Instagram: https://help.instagram.com/155833707900388.
Contact Form
Our website includes contact forms that allow you to get in touch with us. The following data you provide is transmitted to us and stored: first and last name, telephone number, email address, subject, and message.
The information you send us is solely used to process your inquiry/message. By submitting the inquiry/message, you consent to the described data processing (Legal Basis: Consent). You can withdraw your consent at any time, but previous processing actions are not affected by the withdrawal.
Shopify
We use Shopify for our online shop, operated by Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland. Shopify may process data in the USA.
The legal basis for using Shopify is your consent as the data subject. Additionally, we have a legitimate interest in using Shopify, which serves to optimize and ensure the security of our online offering. The basis for data processing and data transfer to the USA is the use of standard contractual clauses. These clauses ensure Shopify’s compliance with applicable European law and data protection standards, even if the data is processed in a third country, such as the USA.
Further information on Shopify can be found here: https://www.shopify.com/legal/privacy.
Right of Access
As the data subject, you have the right to request confirmation from us as to whether personal data concerning you is being processed by us. If this is the case, you have the right to obtain the following information:
- The purposes for which the personal data is processed;
- The categories of personal data being processed;
- The recipients or categories of recipients to whom the personal data has been or will be disclosed, especially recipients in third countries or international organizations;
- The planned duration for which the personal data concerning you will be stored, or, if this is not possible, the criteria used to determine this duration;
- The existence of a right to rectification or deletion of the personal data concerning you or to restrict its processing by us or to object to this processing;
- The existence of a right to lodge a complaint with a supervisory authority;
- All available information regarding the origin of the personal data not collected from you;
- The existence of automated decision-making, including profiling, and meaningful information about the logic involved, as well as the scope and the intended consequences of such processing for the affected person.
- Furthermore, you have the right to request information as to whether personal data concerning you is being transferred to a third country or an international organization. In this case, you have the right to be informed about the appropriate safeguards related to the transfer.
Right to Rectification and Erasure
You have the right to request from us the immediate correction and/or completion of inaccurate and/or incomplete personal data concerning you.
You also have the right to request the immediate erasure of personal data concerning you, provided one of the following reasons applies:
- The personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
- You withdraw your consent and there is no other legal basis for processing;
- You object to the processing on grounds relating to your particular situation, and there are no overriding legitimate grounds for the processing, or you object to the processing for direct marketing purposes;
- The personal data concerning you have been unlawfully processed;
- The erasure of the personal data concerning you is required to fulfill a legal obligation;
- The personal data concerning you were collected in relation to services offered by the information society in accordance with Art. 8(1) GDPR.
Right to Restriction of Processing
As a data subject, you have the right to request the restriction of processing if one of the following conditions is met:
- The accuracy of the personal data is contested. The restriction can be requested for the duration that allows us to verify the accuracy of the personal data;
- The processing is unlawful and you request – instead of erasure – the restriction of processing;
- We no longer need the personal data for processing, but you need them for the establishment, exercise, or defence of legal claims;
- You object to the processing.
If the processing of personal data concerning you is restricted, we may process the data only with your consent or to establish, exercise, or defend legal claims, or to protect the rights of another natural or legal person, or for reasons of public interest.
If you have obtained a restriction on processing according to the above conditions, you will be notified by us before the restriction is lifted.
Information and Notification Obligation to Third Parties
If we have made your personal data public and are required by law to erase them, we will take reasonable measures – including technical measures, considering available technology and implementation costs – to inform other controllers and processors that are processing this data that you have requested the erasure of all links to, or copies or replications of, this personal data.
We will inform all recipients to whom your personal data has been disclosed about any rectification or erasure of such data, as well as any restrictions on their processing, unless it is impossible or would involve disproportionate effort. In such cases, we will strive to clearly communicate the reasons for non-notification and ensure that your rights are still protected.
Exceptions to the Right to Erasure
The right to erasure does not apply if the processing is necessary for the exercise of the right to freedom of expression and information and/or for the establishment, exercise, and/or defence of legal claims.
Right to Data Portability
You, as a data subject, have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format. You also have the right to transmit those data to another controller without hindrance from us, provided the processing is based on consent or a contract and is carried out by automated means.
You further have the right to have the personal data concerning you transmitted directly from us to another controller, where technically feasible. The rights and freedoms of other persons must not be impaired.
Right to Object
You, as a data subject, have the right to object at any time to the processing of personal data concerning you, based on Article 6(1)(e) or (f) GDPR, for reasons related to your particular situation. We will no longer process the personal data unless we demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms. An additional exception applies to processing for the establishment, exercise, or defense of legal claims.
If we process your personal data for direct marketing purposes, you have the right to object at any time to the processing for such marketing. If you object to the processing for this purpose, we will no longer use your personal data for such marketing purposes.
You have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
Right to Lodge a Complaint with a Supervisory Authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, particularly at your place of residence (EU/CH), your workplace, or the place of the alleged infringement, if you believe that the processing of personal data concerning you violates the GDPR or the Swiss Data Protection Act (DSG). The authority responsible for Switzerland is:
Federal Data Protection and Information Commissioner, Feldeggweg 1, 3003 Bern.
The supervisory authority where the complaint is lodged will inform the complainant about the status and outcome of the complaint, including the possibility of a judicial remedy.
