Privacy policy

1. DEFINITIONS
Privacy Policy : This Privacy Policy
Website : the website www.Grandluxsa.com , on which Grand Lux SA (UID : CHE-376.265.874) sells Products.
Buyer : any person who views the content of the Website (Grandluxsa.com), interacts with the Website, or places an Order for a Product or Products through the Website.
Seller : Grand Lux SA; Legal form : Limited; UID : CHE-376.265.874; Date of registration : 14/03/2018; Nominal capital : CHF 100'000.00; Address : 14 Place de Cornavin, 1201 Geneva, Switzerland; NOGA code : G46 (Wholesale trade, except of motor vehicles and motorcycle); E-mail : info@grandluxsa.com ; Phone : +41 79 923 13 30.
Data controller : Baturin Andriy
GDPR : General Data Protection Regulation. The General Data Protection Regulation (GDPR), officially known as Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, is a European Union regulation that serves as the reference text for the protection of personal data[1]. It strengthens and unifies data protection for individuals within the European Union.
nFADP 2023 / revised FADP / nDSG / LPD (révisée) : The Swiss nFADP 2023 "New Federal Act on Data Protection" / nDSG "Neues Datenschutzgesetz" German acronym / LPD (révisée) "Loi fédérale sur la protection des données" French acronym) is Switzerland's updated data privacy law, effective September 1, 2023, which modernizes the 1992 act to align with the digital age and EU GDPR standards. It applies to both Swiss and foreign companies handling data of Swiss natural persons, strengthening data subject rights and imposing strict accountability.
Personal data (Data) : data relating to a natural person that identifies or enables the identification of that person, either directly or indirectly, in accordance with applicable law.
Processing of personal data : operations performed on Personal Data, whether manually or automatically, such as : collection, recording, organization, structuring, refinement, storage, retrieval, consultation, or erasure.
Product : means any Product offered by Grand Lux SA that may be ordered by the Buyer through the Website.
Order : Any order for any quantity of Products placed by the Buyer through the Website.
Carrier : a company that transports goods. The Carrier is responsible for the safety of the cargo and for meeting delivery deadlines.
Website Host : Infomaniak Network SA, Rue Eugène Marziano 25, 1227 Les Acacias, Geneva, Switzerland. infomaniak.com . Commercial Register of the Canton of Geneva : CH-660.0.059.996-1. IDE/VAT number : CHE-103.167.648 . Contact : infomaniak.com/en/help .

2. PREAMBLE
We place great importance on protecting the privacy and personal data of our customers, as well as on complying with the applicable laws of Switzerland and the European Union.
This Privacy Policy complies with both the Swiss nFADP (New Federal Act on Data Protection of 2023) and the GDPR (European General Data Protection Regulation).

This Privacy Policy explains the purposes for which and the methods by which the Seller collects, processes, uses, and protects Buyers’ Personal Data. This Privacy Policy also informs Buyers of their rights and describes the Seller’s obligations regarding the confidentiality and protection of Buyers’ Personal Data.

You do not need to create a customer account to place Orders on our website. You can place an Order in one of three ways :
---* Place an Order via the contact form on the Website by clicking the *Info request* button on the page of the Product you are interested in;
---* Place an order by email;
---* Place an order by phone.

Given the ongoing development of laws and regulations in the field of technology and Personal Data protection, the Seller reserves the right to update this Privacy Policy. The Seller will notify Buyers (whose Personal Data is stored in the Seller’s database) of any changes to this Privacy Policy via email. If any provision of this Privacy Policy is found to be invalid or contrary to law, it shall not affect the validity of the other provisions of this Privacy Policy.

This Privacy Policy does not apply to information collected by third parties or through websites operated by third parties, including through applications or content (including advertisements) that redirect users to the Website. As part of our anti-fraud efforts, if you commit fraud or attempt to commit fraud, your Personal Data may be disclosed to law enforcement agencies or other companies and organizations involved in anti-fraud activities.

Please read this Privacy Policy carefully. Please note that by accessing our Website, you automatically agree to this Privacy Policy. If you do not agree with this Privacy Policy, please leave our Website.

3. WHAT KIND OF DATA DOES Grand Lux SA COLLECT ?
Depending on the nature and purpose of your interaction with the Seller and the Website (filling out the contact form on the Website, as well as during any phone calls or email correspondence), we may collect the following Data :
---* First Name
---* Last Name
---* Shipping Address
---* Phone Number
---* Email Address
---* Data related to Orders: order history and total amount, payment history, unpaid invoices, discount history, and history of Product returns and exchanges.
---* Information regarding sold Products: Product serial numbers, lot numbers, expiration dates.

The Buyer is responsible for verifying the accuracy of the Data provided to the Seller. If necessary, the Buyer may request that the Data be corrected or updated by sending an email with the relevant request to our email address: info@grandluxsa.com .
The Seller does not collect any data related to payment methods.

3.1 Anonymous (non-identifying) information
When a Customer browses our Website, the server automatically records the following Customer data:
---* IP address ;
---* Date and time of your visit to the Website;
---* Pages viewed on the Website;
---* Total time spent on the Website;
---* Browser type and version;
---* Search queries;
---* Language used to display content.
This information is not personally identifiable (i.e., it does not allow for the reliable identification of the Buyer) and is used solely to analyze visitor traffic in order to update our product range and further improve our Website.

4. HOW IS YOUR DATA COLLECTED ?
The Seller may collect Buyers' personal data in various ways.
Data may be collected directly when the Buyer provides it to the Seller by filling out and submitting the contact form. The contact form is activated by clicking the *Info request* button on the Product page. Data may also be collected when the Buyer contacts the Seller by phone or via email.

The Seller may also indirectly collect certain Data using Cookies. You can find detailed information about our use of Cookies in the relevant section of our Website :
Cookie Policy >>

5. PURPOSES OF DATA COLLECTION AND PROCESSING :
The Seller may collect Customer Data for the following purposes :
---* To place and process an Order (in particular, to issue invoices and provide after-sales service). The Seller collects, processes, and stores the Data necessary to place an Order.
---* Ensuring security on the Website.
---* Notifying Customers of changes related to the Website or our Products.
---* Traffic analysis and user experience research may be conducted to measure the number of users on the Website and improve the usability of our Website.
---* Sending promotional and/or informational materials via email to our Buyers who have given their consent.
---* For advertising purposes, specifically to customize ads in Google Ads and targeted ads via Meta Pixel (Facebook Pixel), within the limits permitted by Swiss law.
---* Additionally, we may use the Data to comply with our legal or regulatory obligations, if necessary.

6. WHO PROCESSES YOUR DATA ?
Buyer data may be processed by the Seller’s employees responsible for :
---* Processing orders ;
---* Providing technical support, consultations, and after-sales service.

In addition, in the course of our business operations, certain Data may be transferred to subcontractors, service providers, or other third parties (including some based outside Switzerland), in particular :
---* Banks;
---* Carriers;
---* Accounting firms;
---* IT service providers;
---* Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.
---* Meta Platforms Inc, 1 Meta Way, Menlo Park, CA 94025, USA.

All of the aforementioned subcontractors, service providers, partners, or other third parties are contractually obligated to maintain the confidentiality and security of the Data and to process it solely for the purposes for which we transfer it. The transfer of Data to third parties is permitted solely for the purpose of processing Buyer Orders, so that they (the third parties) can perform their functions related to Order processing (accepting payment, delivering your Order, etc.).

All third-party service providers undergo a thorough vetting process and enter into contracts that ensure an adequate level of protection and the implementation of necessary security measures regarding our Buyers' personal data.
We continue to continuously analyze the relevant legal requirements and any other requirements issued by Swiss and European data protection supervisory authorities as they arise.

The Seller may also disclose your Data upon request from government and/or regulatory authorities to comply with any applicable legal requirements. Such disclosure may include sharing information with other companies and organizations for the purpose of combating fraud and counterfeiting.

7. DATA RETENTION PERIOD
Data provided by the Buyer via the contact form, during telephone conversations, or in email correspondence may be retained for up to one year from the date of the last contact, provided that the Buyer has not placed an Order.
Data necessary for managing Orders (data used for billing and after-sales service) may be retained for up to 10 years from the date of the last Order, provided that the Buyer placed an Order and the Data relates to a specific Order.

Our website uses Cookies. Different types of Cookies may have different expiration dates. For detailed information about our use of Cookies, please visit the relevant section on our website :
Cookie Policy >>

8. HOW IS YOUR DATA STORED AND PROTECTED ?
We place great importance on protecting the privacy and Personal Data of our Customers, and therefore we make every effort (by implementing technical and organizational measures) to ensure the security and confidentiality of your Data.

Our website is hosted on a reliable server that is protected by a firewall and antivirus software and is located in Switzerland.
Website Hosting Provider:
Infomaniak Network SA, Rue Eugène Marziano 25, 1227 Les Acacias, Geneva, Switzerland. infomaniak.com . Commercial Register of the Canton of Geneva : CH-660.0.059.996-1. IDE/VAT number : CHE-103.167.648 . Contact : infomaniak.com/en/help .

9. LEGAL BASIS FOR DATA PROCESSING
GDPR - General Data Protection Regulation. The General Data Protection Regulation (GDPR), officially known as Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, is a European Union regulation that serves as the reference text for the protection of personal data[1]. It strengthens and unifies data protection for individuals within the European Union.

nFADP 2023 / revised FADP / nDSG / LPD (révisée) - The Swiss nFADP 2023 "New Federal Act on Data Protection" / nDSG "Neues Datenschutzgesetz" German acronym / LPD (révisée) "Loi fédérale sur la protection des données" French acronym) is Switzerland's updated data privacy law, effective September 1, 2023, which modernizes the 1992 act to align with the digital age and EU GDPR standards. It applies to both Swiss and foreign companies handling data of Swiss natural persons, strengthening data subject rights and imposing strict accountability.

10. YOUR RIGHTS
The Buyer has the right to access, correct, and delete Personal Data concerning him or her. The Buyer may exercise this right by sending an email (in any format) to the Seller at : info@grandluxsa.com
Upon modification or deletion of the Personal Data, the Seller agrees to notify the Buyer via email.

You can browse the Website without providing any Data. However, in that case, you will not be able to place an Order.
You have the right to have your data deleted (with the exception of accounting data, which we retain for 10 years).
You have the right to object to the processing of your Data on legitimate grounds in accordance with Article 21 of the GDPR.
You have the right to withdraw your consent, even if it was previously requested from you. If your Data is processed based on your consent, you may withdraw it at any time.

If the Buyer decides to exercise any of the above rights, the Seller (in accordance with Article 12.6 of the GDPR) reserves the right to request confirmation of the Buyer’s identity. The Data confirming the Buyer’s identity will be deleted immediately after the Seller responds to the Buyer’s request.

The customer may exercise all of the above rights by sending a request via email (in any format, in English or French) to the following email address: info@grandluxsa.com
The Seller agrees to respond to any inquiry regarding the exercise of the Buyer’s rights within one month.