PRIVACY POLICY DECLARATION

As of 1 April 2024

The following data protection declaration applies to Fotostudio Boudoir Boutique by Marina Siahaan, boudoir-boutique.ch and its sub-domains, affiliated sites and social media pages and Fotostudio Boudoir Boutique by Marina Siahaan’s accounts on Facebook, Instagram, LinkedIn, Tiktok, Youtube, Pinterest, Whatsapp and Twitter

(“Website”/”Site”/“Websites”/”Sites”).

It defines the principles according to which we process all personal data that we collect from you and/or that you make available. We respect your privacy choices and understand your need to keep your personal information private. We are committed to safeguarding all information we collect from you when you use our Content, Services, and/or Products.

If you are a User, Visitor, Viewer, Subscriber, Client, and/or Customer of our Sites (“User”, “You”, and/or “Your”), read this Privacy Policy in its entirety before using, viewing, downloading, purchasing from, or accessing our Site, Contents, Services, and/or Products.

By using our Sites, you consent to the terms and conditions of this policy declaration.

If you do not accept it, please do not access our Sites.

General Information about the collection of personal data and provider identification

1. In the following, we inform you about the collection of personal data when using the website. Personal data are all data that relate to a specific or identifiable person. For example, name, address, e-mail addresses, user behavior, etc.

2. Consenting to our use of cookies per the terms of this policy when you first visit our website permits us to use cookies every time you visit our website.

3. These Sites and Fotostudio Boudoir Boutique by Marina Siahaan are represented by Marina Siahaan (“I”/ “We”/ “Us”/“Our”) and located in Fehraltorf, Switzerland. You can contact us at info@boudoir-boutique.ch.

WHAT DO WE COLLECT?

We collect, store, and use the following personal data:

Personal Identification Information (First Name, Last Name, E-mail Address, Physical Address, Telephone Number)
Credit Card Information / Payment Information
Billing and Shipping Address
Tax Identification Number (TIN)
Identification Cards
Social Media Profile Information
Photos
Bio
Location
Birthdates
Gender
Medical History
Profession

We also collect, store, and use data about your behavior, for example, purchase data and data from your computer, including your IP Address, Geographical Location, Browser Type, Time Zone, Operating System, Browser Version, Pages on our Site that you visit, time and date of visit, and time spent on those pages.

Lastly, we collect information in any communications you send to us by e-mail or through our website, including its communication content and metadata.

HOW DO WE COLLECT YOUR PERSONAL DATA?

In most instances, you provide us with the data we collect. We collect and process data when you:

Subscribe to our e-mail list or newsletter.
Purchase anything from our Sites.
Download anything from our Sites, including freebies, lead magnets, and the like.
Contact us through e-mail or the contact button on our Sites.
Participate in contests and giveaways.
Enter our Sites to gain access to courses, membership areas, blogs, and private groups.
Leave a review or feedback.
Voluntarily complete a customer survey.
Allow us to interview you.

We collect information about your computer, including your IP address, geographical location, browser type and version, and operating system by automated data collection technologies, including Facebook Pixels, Google Analytics, Cookies, and similar methods, as detailed below. This means that we are already collecting this data when you browse our Site.

We collect communication content and metadata when you post it to our Sites or mobile application and when our website generates metadata in connection with your communication.

Before you disclose to us the personal information of another person, you must obtain that person’s consent to disclose and process that personal information per this policy.

OUR LEGAL BASIS WHY DO WE COLLECT YOUR INFORMATION

Personal data that you submit to us voluntarily, through our Site, or through other means will be used to:

Administer our Sites and business.
Personalize our Site for you.
Enable your use of the services available on our Sites.
Allow you to access our private groups.
Process your order.
Send you goods you purchased from us.
Supply services you purchased from us.
Manage the account you created on our Sites.
Send statements, invoices, and payment reminders, and collect your payments.
Send you non-marketing commercial communications.
Send you e-mail notifications that you have specifically requested.
Send you newsletters if you subscribe to our website. You can inform us anytime if you no longer require the newsletter.
Send you marketing communications relating to our business or the businesses of carefully selected third parties, which we think may be of interest to you by post or, where you have specifically agreed to this, by e-mail or similar technology. You can inform us anytime if you no longer require marketing communications.
Provide third parties with statistical information about our users. We never provide third parties with data that can identify any individual user from that information.
Deal with inquiries and complaints made by or about you relating to our Site, Products, or Services.
Keep our Sites secure and prevent fraud.
Verify compliance with the terms and conditions governing the use of our Sites, including monitoring private messages sent through our Site’s private messaging service.
Comply with a legal obligation.
Protect the life or physical safety of the data subject.
Other uses consistent with this Privacy Policy.

If you submit personal information for publication on our Site, we will publish and otherwise use that information per the license you grant.

Without your express consent, we will not supply your personal information to any third party for their or any other party’s direct marketing.

WE WILL DISCLOSE YOUR PERSONAL INFORMATION IN THE FOLLOWING INSTANCES:

We will never sell or trade your personal information.

We may disclose your personal information to any of our employees, insurers, professional advisers, agents, suppliers, or subcontractors as reasonably necessary for the purposes set out in this policy.

In particular, to fulfill your order, we share your name, address, and e-mail with shipping companies such as Swiss Post Ltd. You can find Swiss Post Ltd’s privacy policy at https://www.post.ch/en/pages/footer/data-protection-and-disclaimer#data-protection.

We will disclose your personal information:

To the extent that we are required to do so by law.
In connection with any ongoing or prospective legal proceedings.
To establish, exercise, or defend our legal rights, including providing information to others for the purposes of fraud prevention and reducing credit risk.
To the purchaser (or prospective purchaser) of any business or asset that we are (or are contemplating) selling; and
To any person we reasonably believe may apply to a court or other competent authority for disclosure of that personal information where, in our reasonable opinion, such court or authority would be reasonably likely to order disclosure of that personal information.

Except as this policy provides, we will not provide your personal information to third parties.

DETAILS ABOUT OUR PLATFORM AND SERVICE PROVIDER

www.boudoir-boutique.ch (“Website”) is hosted by Square Space (“Host”). Our Host provides us with an online platform to host our blog and sell our products and services to you.

Your data may be stored through our Host’s data storage, databases, and general applications.

Our Host and other service providers may use analytic tools to measure traffic and usage trends for our website. For example, when you visit our website, our Host may collect the following information from your visit:

the IP address of the computer or device you are using to visit our website,
date and time of access,
name and URL of the data accessed,
the website from which access is made to our domain,
your computer’s operating system and the browser you use,
the country from which access to our website, and
the name of your internet provider.

This data is stored and managed by our Host and, thus, is subject to their privacy policy. By using our website, you agree to be bound by our Host’s privacy policy, which you can find here: https://www.squarespace.com/privacy.

DETAILS ABOUT OUR PRIVATE GROUPS

Our Private Group Fotostudio Boudoir Boutique Women's Only Group ❤️ is hosted by Facebook (“Group Platform”). When you join our private group, your data will be stored by our Group Platform in their database and general applications.

When you comment or provide feedback, it is possible that your Name, Photo, and, sometimes, location will become accessible to other Group Members.

Our Group Platform may use analytic tools to measure traffic and usage trends.

the IP address of the computer or device you are using to visit our website,
date and time of access,
name and URL of the data accessed,
the website from which access is made to our domain,
your computer’s operating system, and the browser you use,
the country from which you access our website, and
the name of your internet provider.

This data is stored and managed by our Group Platform and, thus, is subject to their privacy policy. By using Fotostudio Boudoir Boutique Women's Only Group ❤️, you agree to be bound by our Group Platform’s privacy policy, which can be found here: https://www.facebook.com/privacy/policy/

INTERNATIONAL DATA TRANSFERS

Information we collect may be stored, processed, and transferred between any countries where we operate to enable us to use the information per this policy. This means that your personal information will be transferred to, stored at, and processed in jurisdictions other than where you live.

In particular, information that we collect is transferred and/or processed in Switzerland and the United States.

Furthermore, note that the United States is not included in Switzerland’s safe list because it may not have the same data protection regulations as that afforded in Switzerland and the EU. If you are located in Switzerland and you continue to use our site, despite our declaration, you are consenting to processing of your data in the United States by our Service Provider, Square Space.

Personal information that you publish on our Sites or submit for publication on our Sites will be available, via the Internet, around the world. We cannot prevent the use or misuse of such information by others.

You expressly agree to the transfers of personal information described in this Section.

WHAT ARE YOUR RIGHTS?

1. Right to Access. You have a right to request from us copies of your personal information subject to the following:

The supply of appropriate evidence of your identity, such as a photocopy of your passport.
Payment of CHF 50 to cover the administrative expenses incurred.
We may withhold the personal information you request to the extent permitted by law.
You may instruct us at any time not to process your personal information for marketing purposes.

2. Right to Erasure. If you have consented to the use of data, you can revoke it at any time.

3. Right to restrict processing. You have the right to request that we restrict the processing of your personal information under certain conditions.

4. The right to object processing. Under certain conditions, you have the right to object to our processing of your personal information.

5. The right to data portability. You have the right to request that we transfer the data we collected to another organization, or directly to you, under certain conditions.

6. Right to Rectification. You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete information you believe is incomplete.

7. Right to Opt-out

We may share your information as necessary with our third-party service providers or collaborators. You will always be informed if we share your information before you opt-in. If you decide to opt-in, you will always have a right to opt-out.

All requests for information, requests for disclosure, or objections to data processing should be sent by e-mail to admin@boudoir-boutique.ch. If you make a request, we have thirty (30) days to respond.

We may deny your requests in certain instances; for example, we cannot verify that you are the owner of the information, or we are legally required to maintain a copy of the personal information. In that event, we will communicate this fact to you in writing.

You may appeal our decision by responding to the communication denying your request.

YOU HAVE A RIGHT TO UNSUBSCRIBE

If at any time you wish to unsubscribe from our e-mail list, send an e-mail at admin@boudoir-boutique.ch or follow the instructions we provide at the bottom of every e-mail that we send.

Our E-mail Service Provider allows us to segment and tag our leads. And therefore, it is possible that you are part of several segments or lists. This is especially true if you interact with us through different methods. For example, you sent an inquiry, downloaded a lead magnet, watched a particular presentation, or bought a particular service/product. This means that when you unsubscribe using the link in an e-mail, you may only be unsubscribing from a particular segment or list.

To completely unsubscribe from our leads list, you may need to send us an e-mail at admin@boudoir-boutique.ch.

HOW DO WE RESPOND TO “DO NOT TRACK” REQUESTS?

Note that your browser settings may allow you to automatically transmit a “Do Not Track” signal to websites and online services you visit. There is no consensus among industry participants as to what “Do Not Track” means in this context. Like many websites and online services, we currently do not alter our practice when we receive a “Do Not Track” signal from a visitor’s browser. To find out more about “Do Not Track.” You may wish to visit http://www.allaboutdnt.com.

HOW LONG DO WE RETAIN YOUR DATA?

We keep data for as long as there is a need to keep it in connection with the purposes for which it was collected. We may retain your data after a particular matter or exchange has concluded, but purely for record-keeping purposes and to be able to respond to queries.

Notwithstanding the other provisions of this, we will retain documents, including electronic documents, containing personal data:

To the extent that we are required to do so by law.
If we believe that the documents may be relevant to any ongoing or prospective legal proceedings; and
To establish, exercise, or defend our legal rights (including providing information to others for the purposes of fraud prevention and reducing credit risk).

While the specific periods vary depending on the circumstances, we generally will not keep records that include personal data for more than ten (10) years after a particular matter or exchange has concluded.

If you ask us to stop sending you marketing communications or Unsubscribe from our e-mail list, we will retain specific details, such as your name, to help us ensure that you are not contacted again.

SECURITY OF YOUR PERSONAL INFORMATION

Our Website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content. Third parties cannot read the data that you transmit to us.
We will take reasonable technical and organizational precautions to prevent your personal information’s loss, misuse, or alteration.
As we are using our Host’s platform for our website, as such, we are limited by the processes used by our Host to protect your data, including the use of firewall and encryption for payments.
All physical documents in paper format are stored under lock and key and cannot be accessed outside our organization. We store them in accordance with our retention policy, after which they are shredded and destroyed.
You acknowledge that transmitting information over the Internet is inherently insecure, and we cannot guarantee the security of data sent over the Internet.
You are responsible for keeping the password you use for accessing our Sites; we will not ask you for your password except when you log in to our website.

COOKIES AND TRACKING TOOLS

1. Cookies

Our Site uses cookies. These small text files make it possible to save specific, user-related information on your device while you are using our Site. Cookies make it possible for us to determine the frequency of use and the number of users of the pages of our Sites and to analyze the behavior of our Site users. They make our offers more customer friendly.

Cookies are stored beyond the end of a browser session and can be called up again when you revisit the Site. If you do not want this, you should set your internet browser so that it refuses to accept cookies.

We have a separate cookies policy that will inform you what cookies we are using and how you can exercise your choice whether to accept or reject the use of our Cookies. You can read it here.

You can also delete cookies. If you are in Europe, you can learn more about how to delete cookies on this website: www.youronlinechoices.com

Note, however, that deleting cookies will negatively impact the usability of many websites.

2. Use Of Facebook Pixels

We use Facebook Pixel, which is a small piece of code that we incorporate into our website. It allows us to track user interactions and collect information that helps us measure the effectiveness of our advertising, optimize our content, and target relevant audiences on Facebook and Instagram.

We use Facebook Pixels for the following purposes:

Tracking Website Traffic: Facebook Pixels help us monitor user interactions on our website, including page views, clicks, and conversions. This data helps us understand how users navigate our website and their actions.
Advertising and Remarketing: We use Facebook Pixels to create and deliver targeted advertisements to individuals who have visited our website. This allows us to provide relevant content and offers to our users.
Analytics: Facebook Pixels help us gather insights into the effectiveness of our marketing efforts and advertising campaigns.

The Facebook Pixel collects various data, including but not limited to:

Your IP address
Cookie data
Page(s) visited
Actions taken on our website
Device information
Referrer URL

This data is anonymous and does not directly identify you. It is used for statistical and analytical purposes to improve our website and marketing efforts.

To acquire comprehensive information on how Facebook processes and uses your data, please consult Facebook's Privacy Policy at https://www.facebook.com/privacy/policy/

This policy will provide you with insights into Facebook's specific data usage practices and controls.

3. We Use Google Analytics

We use Google Analytics, a web analysis service for boudoir-boutique.ch (“Google Analytics”).

We use Google Analytics for a cross-device analysis of our visitors. We want to point out that Google Analytics ensured an anonymous collection of IP addresses. If the data collected from you can be linked to a person, it will be excluded and deleted immediately.

Your full IP address may be sent to a Google Server in the US in exceptional cases. Google will use the information to evaluate your use of our Sites and to compile reports on our Site’s activities. If this exceptional case occurs, Google Analytics has submitted to the EU-US Privacy Shield, which you can read here: https://www.privacyshield.gov/EU-US-Framework.

Google Analytics uses Cookies which you can deactivate using a plug-in for this purpose. If you opt to deactivate Google Analytics, you may be unable to use all functions of our Sites to their full extent.

OPT-OUT OF TARGETED ADVERTISING

You can opt-out of targeted advertising by visiting the following websites:

Network Advertising Initiative (NAI): http://www.networkadvertising.org/choices/

Digital Advertising Alliance (DAA): http://www.aboutads.info/choices/

PRIVACY POLICY ON CHILDREN

Our Sites are not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If you are under 18, please refrain from providing any information on our Sites.

If you are a parent or guardian and know that your child has provided us with Personal Information, please contact us.

If we become aware that we have collected personal data from anyone under the age of 18 without verification of parental consent, we take steps to remove the information from our system.

WE WILL NEVER SELL YOUR INFORMATION

All the information we collect from you is used solely for the purposes enumerated in this Privacy Policy. We do not monetize any data we collect from you through selling said information.

YOUR PERSONAL DATA WHEN YOU PURCHASE ANYTHING FROM OUR SITES

We do not collect, store, or have access to any payment data (for example, credit/debit card details) related to your purchase. We may have access to limited personal data, such as your name, e-mail address, and which products you purchased. Furthermore, we may use this data to contact you about your purchase, but only if you have given your consent to allow us to do so.

We make use of the following payment gateways:

1. Use of instant bank transfer by Stripe

If you pay by instant bank transfer, your bank details will not be stored by us but will be encrypted using the “SSL” method and forwarded to the payment service provider Stripe Payments.

If you have questions about Stripe’s privacy policy, please message privacy@stripe.com.

2. Offline Banking or Payment through Bank Transfer

If you choose offline payment through Bank Transfer, we will have access to the following information:

Your name
Your Phone number
E-mail address
You Bank Account Number

However, we do not have control, nor are we responsible for how Banking institutions handle these details.

If you choose payment via Bank Transfer, you can read about our bank’s privacy policy here: https://www.ubs.com/global/en/legal/privacy/switzerland.html

3. TWINT

If you choose to pay us via TWINT, we will have access to the following information:

Your name
Your Phone number
Your mobile number

However, we do not have control or responsible for how TWINT and our bank handle these details.

If you choose payment via TWINT, your data will be processed by them, and you can read about their privacy policy here: https://www.twint.ch/en/website-data-privacy/ and https://www.twint.ch/en/app-dataprotection/

USE OF SOCIAL MEDIA PLUG-INS

We currently use the following social media plug-ins: Meta Platforms, Inc. (Facebook and Instagram), Pinterest, and Youtube.

We use the so-called 2-click solution. This means that when you visit our Site, no personal data is initially passed on to the providers of these plug-ins.

You can recognize the plug-in provider by the initial letter/symbol. Only if you click on one of the plug-ins will personal data be transmitted: When the plug-in is activated, data is automatically transmitted to the respective plug-in provider and stored there. We do not influence the collected data and data processing procedures, nor are we aware of the full extent of the data collection, the purposes, or the storage periods. Since the plug-in provider collects data mainly via cookies, we recommend that you delete all cookies before clicking on the symbols via the security settings of your browser.

If you want to learn how our social media plug-ins provider handles your data, you can read their respective privacy policies here:

Meta Platforms, Inc (Facebook): https://www.facebook.com/privacy/policy

Meta Platforms, Inc (Instagram): https://privacycenter.instagram.com/policy

Pinterest: https://policy.pinterest.com/en/privacy-policy

Youtube Inc.: https://policies.google.com/privacy?hl=en

THIRD-PARTY LINKS

Our Sites may contain links to other websites not operated by us. If you click on a third-party link, you will be directed to that third-party’s Site. We strongly advise you to review the privacy policy of every Site you visit.

We have no control over and assume no responsibility for any third-party sites or services’ content, privacy policies, or practices.

OUR SOCIAL MEDIA ACCOUNTS AND THIRD-PARTY APPLICATIONS WE USE.

You may engage with us through our social media accounts and other third-party applications we use.

This privacy policy is also applicable to those engagements as far as practicable.

Take note that the personal information you transmit to our social media accounts or through third-party applications we use is usually not collected by us but by our social media platform providers. As such, they are governed by the privacy policies of those providers. Likewise, these providers use cookies.

If you want to know how our social media and third-party application provider use and collect your data, please read their respective privacy policies here:

Facebook

Owner: Meta Platforms, Inc

Instagram

Owner: Meta Platforms, Inc

Owner: Whatsapp Ireland Ltd.

Owner: Telegram Messenger Inc.

Tiktok

Owner: Tiktok Ireland

Owner: Pinterest Inc

Youtube

Owner: Google LLC

Google

Owner: Google LLC

Linkedin
Owner: LinkedIn, Inc.

Twitter

Owner: Twitter, Inc.

Zoom

Owner: Zoom Video Communications, Inc.

Canva

Owner: Canva Pty Ltd

MailerLite

Owner: UAB "MailerLite"

Konpoli Printing Exporting IKE

Owner: Konpoli IKE

WhiteWall Media GmbH

Owner: WhiteWall Media GmbH

Pic-time.com

Owner: Pic-time LTD

We Transfer

Owner: We transfer B.V.

17Hats

Owner: Isomnio, Inc

OUR E-MAIL POLICY

If you elect to communicate with us via e-mail, we may retain the content of your communications, including your e-mail address. These communications are afforded the same protection as laid out in this privacy policy.

All e-mails sent to us are confidential. We do not disclose, sell, transfer, or otherwise lease our e-mail list to any third parties, nor will we disclose our e-mail list to any third party, except in cases stated in this privacy policy.

In compliance with the provisions of the US CAN-SPAM Act, all e-mails from us will clearly state the sender’s name and clear and specific information as to how to contact us. Our e-mails will also provide detailed instructions if you wish to unsubscribe from our e-mail list.

BASIS OF THIS DATA PROTECTION DECLARATION

This Privacy Policy Declaration was written taking into account your rights and the protection afforded by the Data Protection Law or Regulations existing in the following jurisdictions:

EU: EU General Data Protection Regulation (EU GDPR)
Switzerland: Swiss Federal Data Protection Act (FDPA)
Brazil: Lei Geral de Proteção de Dados (LGPD)
New Zealand: New Zealand Privacy Act 2020
UK: UK GDPR and Data Protection Act
California: California Privacy Rights Act (CPRA)
US: Childrens Online Privacy Protection Act (COPPA)
Canada: Protection of Personal Information and Electronic Documents Act (PIPEDA)
Australia : Privacy Act of 1988

COMPLAINTS

If you have complaints about how we process your data, or you feel that we did not address your concerns, you may contact the Federal Data Protection and Information Commissioner (FDPIC) (+41 (0)58 462 43 95) if you are in Switzerland or the competent Data Protection Authority in the place where you reside.

AMENDMENTS TO THE DATA PROTECTION DECLARATION

We reserve the right to amend the data protection declaration to adapt it to changed legal situations or in the event of changes to the services offered and data processing. However, this only applies with regard to statements on data processing. If the user’s consent is required or elements of the data protection declaration contain regulations of the contractual relationship with the users, the changes are only made with the users’ permission.

The users are asked to inform themselves regularly about the content of the data protection declaration.

If you have questions or complaints about this Privacy Policy, contact us at admin@boudoir-boutique.ch.

BOUDOIR BOUTIQUE