Legal

Privacy policy

Protecting your privacy is important to Kolma AG. In this privacy policy we explain how we may collect, manage and use your personal data. We also describe how you can manage that data. You can reach us at any time at info@kolma.style if you have questions about this privacy policy or about your data.

Summary of how your data is used

  • Kolma AG uses your personal data solely for the purpose of conducting business.
  • Your personal data is stored within our company and with our processors (e.g. agencies that run campaigns for us). Whenever your personal data is transmitted, it is encrypted.
  • Where you have provided us with personal data, we do not pass it on to third parties as a matter of principle. Disclosure to companies outside Kolma AG only takes place with your consent, in the course of handling your enquiries or your use of our services, or to commissioned sub-processors who receive the data required to carry out processing on our behalf. We also transfer personal data to the bodies entitled to receive it in order to fulfil legal obligations.

Who can you contact with questions about data protection?

We hope the information below answers your questions about the processing of your data. If you have concerns about how your data is processed, or if you wish to opt out of direct marketing, you can contact us at info@kolma.style or at the address Kolma AG, Grünaustrasse 20-22, CH-3084 Wabern. You can also use these details to ask us to send you an extract of the personal data we hold about you by post or by e-mail.

What does this privacy policy cover?

This privacy policy describes how Kolma AG collects, uses and discloses data relating to how you use our website or our online services, when you purchase our products, and when you interact with our staff or with us in any other way.

It also sets out your data protection rights, including the right to object to some types of processing carried out by Kolma AG. You will find more information about your rights, and how to exercise them, in the section “What rights do I have?”.

What data do we collect?

We collect and process personal data about you when you interact with our company or our websites, when you communicate with our staff, and when you buy and use goods and services from us. This includes:

  • Your name, username and password
  • Your private or business address, e-mail address and telephone number
  • Your order history
  • Your marketing preferences, including any consents you have given us
  • Private data that helps us serve you better

How do we use your data and on what legal basis?

We process your personal data for the following purposes:

To perform a contract or take steps in connection with a contract: this is relevant when you make a purchase with us or take part in a promotion or prize draw run by us. This includes:

  • Verifying your identity
  • Accepting payments
  • Communicating with you
  • Providing customer service and arranging the delivery or other provision of products, prizes or services.

To run our business and pursue our legitimate interests:

  • In particular, we use your data to provide the products and services you have requested and to respond to any comments or complaints you may send us.
  • We monitor the use of our websites and online services and use your data to monitor, improve and protect our products, content, services and websites, both online and offline.
  • We use the data you provide to personalise our website, products or services for you.
  • We use the data you provide to investigate complaints made by you or others about our website or our products or services.
  • We use data in connection with legal claims and for compliance, regulatory and investigative purposes (including disclosing such data in connection with court proceedings or legal disputes).
  • We use some individuals’ data to invite you to take part in market research, or to enable better customer service.

Where you give us your consent, we use your personal data for the following activities:

  • We send you direct marketing about our relevant products and services, or other products and services provided by us.
  • We use cookies and similar technologies in accordance with the cookie settings you have chosen and the information provided to you when these technologies are used.
  • On other occasions where we ask for your consent, we use the data for the purpose stated at that time.

For purposes required by law:

  • At the request of authorities or law enforcement agencies conducting an investigation.

You apply to us for a vacancy or send a speculative application:

  • We only keep your data for as long as the application process lasts; after that we delete it.

What data do you have to provide?

Providing your first name, surname, address and a current e-mail address is mandatory if you wish to place an order with us or take part in a prize draw or promotion. If you do not provide this data, we cannot fulfil orders or allow you to take part in prize draws and promotions.

Providing any further data is optional. If you do not give a telephone number, delays may occur with complaints and service enquiries, for example if we cannot reach you by phone.

When applying for open positions, you may provide information that counts as “particularly sensitive personal data”.

How can you withdraw consent you have given, or object to receiving direct marketing?

In every case where you have given us your consent to process your data, you can withdraw that consent at any time. If you do, we will stop the processing that was based on that consent.

In some cases we may send you direct advertising without your consent. In that case you have the right to object to direct marketing at any time (“opt out”). You can do so by following the instructions given in the message, if it is an electronic message. Alternatively you can contact us using the details below.

With whom, where and when do we share this data?

We may pass on your personal data in order to fulfil orders, prize draws or other marketing activities you have registered for. In some cases we pass your data to agencies or service providers in order to fulfil orders, prize draws or other marketing activities you have registered for.

If we are required to do so by administrative or law enforcement authorities, we transfer this personal data insofar as this is required by law or is necessary to protect our legitimate interests under applicable law.

We also pass your personal data to processors who process it on behalf of Kolma AG for the purposes set out above. These processors include providers of website hosting and maintenance, advertising agencies, shipping and logistics providers and analytics services.

Should a business division of our company be sold or merged into another company, we may disclose your data to our advisers and those of the potential buyer and pass it on to the new owners of the business.

We will only transfer data to recipients outside the European Economic Area where this is necessary to perform a contract or where adequate data protection is ensured; that is the case, for example, where an adequacy decision of the European Commission applies to the country concerned, or where the data is appropriately protected by standard contractual clauses approved by the EU Commission, by a corresponding Privacy Shield certification, or by the binding corporate rules of the processing provider.

Tracking via Google Analytics

We use Google Analytics to analyse how you use our web pages. In this context we transfer data about the use of our web pages to our processor Google Inc. Google Analytics is configured so that your IP address is transmitted to Google in anonymised form (anonymizeIP). Google produces statistical reports for us about the use of our web pages.

If you do not want to be tracked by Google Analytics, you can install a browser add-on that prevents tracking by Google Analytics.

What rights do I have?

You have the following rights:

  • To ask us for information about the processing of your data that we carry out.
  • To request a copy of your personal data.
  • To have your personal data corrected or deleted, or to have its processing restricted.
  • Where we process your data on the basis of your consent or to perform a contract, you can ask us to provide the personal data you have supplied in a structured, machine-readable format.

You can also object to the processing of your personal data in certain circumstances (in particular where we do not need to process the data to meet a contractual or other legal requirement, or where we use the data for direct advertising).

These rights may be limited, for example where meeting your request would disclose personal data about another person, or where you ask us to delete data that we are required by law to retain.

To exercise these rights you can contact us – or our data protection officer – using the contact details set out below. If you have unresolved concerns, you have the right to lodge a complaint with an EU data protection authority where you live, where you work, or where you believe a breach has occurred.

Which department of Kolma AG is responsible for my data?

Your data is generally processed by the departments responsible for the relevant processing purpose. These may be the sales, purchasing and logistics departments, the marketing department, the IT department, finance and the human resources department.

In individual cases other departments may also access your data, for example the legal department in the event of a legal dispute.

How long do we keep your data?

Where we process registration data, we do so for as long as you are an active user of our websites. Where we process personal data for marketing purposes or with your consent, we do so until you ask us to stop, and for a short period thereafter (so that we can act on your request). We also record indefinitely that you have asked us not to send you direct marketing or not to process your data, so that we can continue to honour your request in future.

Where we process personal data for website security purposes, we store it for as long as you are an active user of our websites.

To manage the cookies and similar technologies used (tracking pixels, web beacons, etc.) and the related consents, we use the consent tool “Real Cookie Banner”. You can find details of how “Real Cookie Banner” works at devowl.io/de/rcb/datenverarbeitung.

The legal bases for processing personal data in this context are Art. 6(1)(c) GDPR and Art. 6(1)(f) GDPR. Our legitimate interest is the management of the cookies and similar technologies used and the related consents.

Providing the personal data is neither contractually required nor necessary for entering into a contract. You are not obliged to provide the personal data. If you do not provide it, we cannot manage your consents.

Kolma AG, 3084 Wabern