General Data Protection Regulation

New data protection law as of 01.09.2023

Privacy Policy

Liquid-Or GmbH (hereinafter "we, us, our, our") places great importance on honesty and transparency and is committed to building a strong, long-term, trust and benefit-based relationship with our customers. This commitment includes protecting and respecting your privacy and choices. Here you can learn about the principles according to which Liquid-Or GmbH collects and processes personal data via this website. The subject of this privacy policy is the collection, processing and use of data through the Liquid-Or GmbH website.

Our data protection promise

1)We respect your privacy and choices.
2)We ensure that privacy and security are a part of everything we do.
3)We will not send you unsolicited marketing messages; you can change your mind at any time.
4)We will never actively offer or sell your information.
5)We are committed to keeping your data safe, including by working with trusted partners.
6)We are committed to openness and transparency regarding the use of your data.
7)We will not use your data in a secret manner.
8)We respect your rights and always try to meet your demands as far as possible within the framework of our own legal and operational responsibilities.

Further information on data protection measures: Below we explain the types of personal information we receive and store directly from you or through interactions with you, how we may use it and with whom we may share it, how we protect it on an ongoing basis, and what rights you have to your personal information. Of course, this does not mean that all of the situations described apply to you. The Privacy Policy gives you an overview of all possible scenarios in which we might interact.

The more you interact with us, the better we get to know you and the better we can provide you with personalized services.

When you provide us with personal information or we collect it about you, we use that information in accordance with this policy. Please read this information letter and our Q&A page (if one exists) carefully. If you have any questions or concerns about your personal information, please contact us at info@liquid-or.com.

Who we are

Liquid-Or GmbH, Dorfstrasse 7, 4656 Starrkirch-Wil (Canton of Solothurn, Switzerland), is responsible for the personal data you provide to us. When we refer to "Liquid-Or GmbH," "us," "our(s)," or "we" we are referring to exactly that. Liquid-Or GmbH is the "data controller" under applicable data protection law.

For more information about LIQUID-OR GMBH, please refer to its website at www.liquid-or.com.

What is personal data?

"Personal data" is information or parts thereof by which you can be identified either directly (e.g., by your name) or indirectly (e.g., by pseudonymized data such as a unique ID). This means that personal data includes, but is not limited to, email addresses, address, cell phone numbers, usernames, profile pictures, personal preferences and shopping habits, user content, financial and health information. However, this may also include one-time identifiers such as the IP address of your computer, the MAC address of your mobile device, and cookies.

What data do we collect from you and how do we use it?

For Liquid-Or GmbH, you, the customer, are at the center of everything we do. We are happy to hear from you, to learn more about you, in order to develop products and services that provide you and your customers with positive added value in terms of body care and beauty. The communication between customer and Liquid-Or GmbH is very important. Therefore, you may share your personal information with us in a variety of ways and we may collect this information.

Encryption / protection of your data

The website uses a security certificate. This encrypts the connections between the website and the visitors. You can recognize an encrypted connection by the lock symbol in the address line of the browser and by the fact that the address of the website starts with https:// instead of http://.

How do we collect or obtain your data?

We may collect or gather your data through our social media pages, forms, apps, devices or brand pages, or otherwise. Sometimes you provide the data to us directly (e.g., when you create an account, contact us, and order products through our pages/apps or a family member), sometimes we collect the data (e.g., by using cookies to help us understand how you use our pages/apps), and sometimes we receive your data from third parties such as distributors.

When we collect data, we mark required fields with an asterisk. Some data we ask you to provide is necessary for us to:

- fulfill our contract with you (e.g. the treatment you agreed with us by phone, email or verbally);

- provide the services to you that you request (e.g., providing you with relevant information);

- Be able to comply with legal requirements (e.g., billing).Missing information in required fields may impact our ability to provide the products and services.

In the following sections, we provide additional information and clarify the following questions:

1. in what context is your data collected? Here we explain which activities or scenarios you are involved in when we collect or record your data, e.g. when you order products from us, use services or browse our website/app.

2. What personal data do we store about you? Here we explain what types of data we collect.3. How and for what purpose do we process the data? This explains what we do with your data and the purposes for which we collect it.

4. What is the legal basis for processing your personal data? Here we explain the reasons for which we process your data, e.g. if you order a service from us, you have given your consent or we have a legitimate interest in using your data.

The legal basis for processing your data may be:o Consent on your part;o Our legitimate interest, i.e. among others:

- Improving our goods and services: more specifically, our business interests, so that we can better understand your needs and expectations and therefore improve our services, pages/apps/devices, products and brands.

- Preventing fraud: to ensure that payments are made in full and without fraudulent behavior or misappropriation;

- Securing our tools: to ensure that our tools (pages/devices) are secure, they work properly and are constantly improved;

- The performance of the contract: more specifically, to provide the services you ask us to provide.

- Legal grounds, when processing is required by law.

Contacting/services/orders

In what context is your data collected?

- Information collected in the context of contact via Liquid-Or GmbH pages/apps, through a login via social media or in the store.What personal data about you might we store?

- First and last name

- Gender

- Email address

- Your address
- Your phone number
- Photograph
- Date of birth or age group
- Personal description or treatment preferences
- Ordering information
- Social media profile (if you use social media login and follow us on social media)

How and why do we store your data?

Purpose:

- Managing your appointment reservation
- Execution of consulting activity
- Administration of informational announcements as well as advertising and informational measures
- Answering your questions and other interaction with you
- Possibility for you to manage the system settings in the area of your accounting or consumption-related act

What is the legal basis for processing your data?

- Contract performance: To provide you with the services you have requested (e.g. contact via contact form, sponsorship requests, collaboration requests or purchase of a service/product).

Purpose:- To store information tailored to your "treatment profile " (i.e. based on personal data we know about you);

What is the legal basis for processing your data?

Consent: To send you information materials directly.Purpose:
- To monitor and improve our pages/apps;
- Analyses or collection of statistics;
- Securing our sites/apps and protecting against fraud for both you and us;- Legitimate Interests:
To ensure that our Sites/Apps remain secure, to protect them from fraud, and to better understand your needs and expectations and improve our services and products accordingly.

Purchases and management of orders

In what context is your data collected?

Information collected as part of the purchase and service performance process through the Liquid-Or GmbH site/app/pages on social media or in-store.

What personal data about you may we store?

- First and last name- email address
- Address (delivery and invoice)
- Phone number
- Personal description or preferences- Social media profile (if you use social media login or provide us with this personal data)
- Transaction data, including products purchased- Payment information
- Previous purchases

How and why do we store your data?

Purpose:

- Contacting you to process your appointment reservation and your requested service.
- Processing and follow-up of your order, including information on the receipt of your ordered products
-Management of the payment of your order, noting that payment information (credit card number/PayPal information/bank details) is not stored by us, but directly by the payment service provider- Management of contact with us regarding your order
- Protecting the transaction from fraud, noting that we use a third-party solution to detect amount and ensure that payment is made in full by you or someone you authorize- Managing disputes regarding a service/purchase.

What is the legal basis for processing your data?

- Contract performance
To provide you with the services you request (treatment).

- Legitimate interest
- Legitimate Interest
To protect you and us from fraudulent transactions and to ensure that payment is made in full and without fraud or misappropriation.
- Consent

To the extent that we process personal data from you that goes beyond the information required for the performance of the contract or the processing of which cannot be based on our legitimate interests as stated herein, we will only process your data to the extent that you have given us your express consent to do so.

Hosting / Online Browsing

This website is hosted by Wix.com in Tel Aviv. At Wix.com, web server log files containing the following information are created by default for each access to the website:
- IP address (address of the device used),- date and time including time zone (timestamp),- accessed content (pages, images, etc.),- amount of data transferred,- origin of the visitor (referer),- operating system used including version,
- browser used including version (user agent).

The log files are used to detect technical problems and to ensure security. This data does not allow any conclusions to be drawn about individual persons.

In what context is your data collected?

Information collected through cookies or similar technologies ("cookies "*) while you browse Liquid-Or GmbH pages/apps or external pages/apps. For information on specific cookies on a particular page/app and how you can adjust the use of individual types of cookies and consent and object to their use, please see our Cookie Settings.

*Cookies are small text files that are stored on your device (computer, tablet or phone) when you are on the Internet, including on the pages of Liquid-Or GmbH companies.

What personal data about you may we store?

Data related to your use of our pages/apps:

- Previously visited page- Pages you have viewed- Duration of your visit - Information you provide via the contact form

Technical information:

- IP address

- Browser information
- Device information

A unique identifier assigned to each visitor and the expiration date of such identifier

How and why do we store your information?

Where relevant, we use cookies together with other personal data that you have already provided to us (e.g. through previous contact) or for the following purposes > Proper functioning of our pages/apps:

- Proper display of content
- Creation and storage of your contact information
- User interface personalization such as parameters of your device, including your screen resolution, etc.
- Improving our pages/apps, e.g., by testing new ideas.
- Ensuring the security of the site/app and to protect you from fraud or misuse of our sites or services, e.g., by fixing bugs
- Compiling statistics

- to improve our services
- To understand how you discovered our pages/apps- Disseminating our content via social media (button to share should be displayed on the page).

What is the legal basis for processing your data?

- Legitimate Interest:
To ensure that we provide you with page/apps, advertisements and communications that work properly and we constantly improve them for cookies that are (i) essential to the functioning of our pages/apps and (ii) used to keep our pages/apps secure.- Consent to all other cookies.Use of Apps and DevicesIn what context is your information collected?Information collected while you are using our apps and/or devices.

What personal data about you might we store?

- First and last name
- Email address- Phone Number
- Location/Address- Date of Birth
- Personal description or treatment preferences

How and why do we store your data?

Purpose:

• Provision of the services you requested

• Analysis of your well-being characteristics and recommendation of suitable products (including custom-made products) and routines

• Recommendation of products and routines

• Research and innovations by scientists of Liquid-Or GmbH

• Monitoring and improvement of our apps and devices

• For statistical purposes.

What is the legal basis for processing your data?

· Contractual performance To provide the services you have requested (including, if necessary, an analysis by the research and innovation team using algorithms required for the provision of the service).

· Legitimate interest To continuously improve our products and services to match your needs and expectations, as well as for research and innovation purposes.

· Inquiries

In what context are your data collected?

Information collected when you inquire about our brands, products, or their use.

What personal data about you may we store?

· First and last name

· Phone number

· Email address

· Other information you have provided about yourself in relation to your inquiry

How and why do we store your data?

· To respond to your inquiries

· To contact you when necessary regarding relevant services

· For statistical purposes

· To monitor and prevent unwanted effects in treatments;

· To make and track corrective actions if necessary.

What is the legal basis for processing your data?

Consent: To process your inquiry

Legitimate interest: To help us better understand the needs and expectations of our customers and, consequently, adapt and improve our services and products.

Legal grounds: To comply with legal requirements for monitoring the side effects of services and products sold.

Sponsorship Activity

What personal data about you may we store?

Depending on the nature of your interaction with us, these may include:

· First and last name

· Phone number

· Email address

How and why do we store your data?

To send information about our products and/or information marked in the wish list of another person upon request.

What is the legal basis for processing your data?

· Contractual performance

· To process your request

· Legitimate interest

· To contact a person at the request of another person.

Automated Decision-Making

To protect transactions on our websites/apps/devices from fraud or misappropriation, we use solutions from external providers. The method for detecting fraud cases is based, for example, on simple comparisons, allocations, clustering, predictions, and the detection of outliers using intelligent tools, data fusion techniques, and numerous data mining techniques.

This fraud detection process can be fully automated or involve human intervention when a person makes the final decision. In any case, we take all reasonable precautions and protection measures to restrict access to your data.

Due to this automated fraud detection, you may experience (i) delays in processing your request while we verify your transaction or (ii) a restriction or exclusion from a service if we detect a risk of fraud. You have the right to access the information we use as a basis for decisions. Please read the "Your Rights and Choices" section below for more information.

Profiling

At Liquid-Or GmbH, we use techniques/systems that can be classified as "profiling" (i.e., any form of automated processing of personal data consisting of using this data to evaluate certain personal aspects related to a natural person, especially for the analysis or prediction of aspects regarding personal order preferences, interests, economic situation, behavior, consumption behavior, location, or reliability. In the various situations described above, we may collect personal data about you.

Under certain circumstances, you have the right to object to the use of data for profiling purposes, except for any data that is strictly required to fulfill our contractual obligations under applicable laws and regulations; please use the "Your Rights and Choices" section below.

Use of Cookies

We use so-called "cookies" to improve our website and tailor it to the needs of visitors as effectively as possible. Cookies are small text files stored within a designated directory of your internet browser.

By storing cookies, your preferred settings and other information can be permanently saved and retained for use on this website. When you return to this website or visit other websites that use the same cookies, the cookies are recognized, and your computer or mobile device and the web browser you are using are recognized. None of the information stored in the cookies can personally identify you. The cookies used are also used to determine the frequency of use and the number of users of our web services and to identify your computer during a visit to our web services/website when switching from one of our web pages to another. This allows us to understand which areas of our web services and which other websites our users have visited. However, this usage data does not allow us to draw conclusions about the user.

Most browsers are pre-set to automatically accept cookies. You can disable the storage of cookies or set your browser to notify you before cookies are stored. Users who do not accept cookies may not be able to access certain areas of our web services.

Furthermore, our web services do not store cookies that do not have purely technical functions and are necessary for the proper functioning of our web services unless you have accepted this in advance. To do this, you must agree to the storage of cookies by clicking "Accept" on the banner that contains the notice about the storage of cookies. For more information about the specific types of cookies we use and how to adjust the use of individual types of cookies and agree to or object to their use, please refer to our Cookie Settings.

Links to External Sites

Our websites and apps may contain links to and from pages of our partner networks, advertising customers, and affiliated companies. If you follow a link to one of these sites, please note that these sites have their own privacy policies, and we do not accept any responsibility or liability for them. Please review these policies before entering personal data on these sites.

Who has access to your personal data?

We may disclose your data deposited with LIQUID-OR GMBH for judicial or emergency (preventing harm to life and limb) reasons to comply with our legal obligations, prevent fraud, and/or protect our tools, improve our products and services, or for any case for which you have given us your consent.

Depending on the purposes for which they were collected and only in cases where knowledge of the data is required, some of your data may be accessed by our website provider, Wix.com, worldwide. When visiting the website, LIQUID-OR GMBH informs all customers about the possibility of this data access by the website host and provides the option to return to Google.ch directly without forwarding the data (e.g. IP address, etc.) by clicking the button.

Your personal data may also be shared by our reliable partner companies (distribution partners, production partners, etc.) on our behalf and with your consent.

We rely on reliable service providers who handle a range of collaborative business processes with us. However, we only provide them with the information they need to provide the services and require that they do not use your personal data for any other purposes. We always make every effort to ensure that all third parties we work with protect your personal data. For example, we may engage the following companies for services that require the processing of your personal data:

· Third parties that assist us in providing digital and e-commerce services, including social listening, store locator, loyalty program, identity management, reviews and ratings, CRM, web analytics, and search engine and user content maintenance tools;

· Third parties responsible for delivering a product to you, such as postal/package carriers;

· Third parties that assist us in providing IT services (e.g., infrastructure and application services, database and website management, customer service, and payment processing);

· Third parties that assist us in providing product safety services (e.g., production data, data from manufacturing processes, etc.);

· Third parties that assist us in the personalization of product recommendations (e.g., retailers, e-commerce marketplaces, technology service providers);

· Third parties that assist us in providing product warranty services (e.g., data from retailers, product ratings, user ratings, etc.);

· Third parties that assist us in providing customer service and after-sales service (e.g., customer service tools, CRM systems);

· Third parties that assist us in marketing our products (e.g., advertising, media agencies);

· Third parties that assist us in research and development (e.g., scientific research institutions, independent research institutions, product test institutes);

· Third parties that assist us in sales and distribution (e.g., our sales partners, distributors, product configurators);

· Third parties that assist us in providing marketing services (e.g., customer segment analysis, data analytics, customer profiling, digital advertising);

· Third parties that assist us in providing legal, regulatory, compliance, and tax services (e.g., law firms, tax advisors, tax authorities);

· Third parties that assist us in providing finance and insurance services (e.g., insurers, banks, credit rating agencies);

· Third parties that assist us in providing auditing services (e.g., auditing firms);

· Third parties that assist us in providing consulting services (e.g., strategic consulting firms);

· Third parties that assist us in providing data security services (e.g., IT security firms).

Your rights

You have the following rights:

· Right of access: You have the right to obtain confirmation as to whether or not personal data concerning you is being processed and, where that is the case, access to the personal data and certain related information.

· Right to rectification: You have the right to obtain the rectification of inaccurate personal data concerning you and to have incomplete personal data completed.

· Right to erasure ("right to be forgotten"): You have the right to obtain the erasure of personal data concerning you under certain conditions.

· Right to restriction of processing: You have the right to obtain the restriction of the processing of personal data concerning you under certain conditions.

· Right to data portability: You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used, and machine-readable format and have the right to transmit that data to another controller under certain conditions.

· Right to object to processing: You have the right to object to the processing of personal data concerning you under certain conditions.

· Right to withdraw consent: You have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

· Right to complain to a supervisory authority: You have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data relating to you infringes the relevant data protection regulations.

· Right to decide against automated decision-making, including profiling: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you under certain conditions.

For the exercise of your rights, please contact our Data Protection Officer, whose contact details you can find at the end of this document.

How do we protect your data?

To guarantee the safety of your personal data, LIQUID-OR GMBH has implemented numerous security measures. Your personal data is stored on secure networks and can only be accessed by a limited number of people with special access rights to such systems. These people are required to keep the information confidential. In addition, all sensitive information you provide is encrypted via Secure Socket Layer (SSL) technology.

We implement a variety of security measures when a user enters, submits, or accesses their information to maintain the safety of your personal data.

LIQUID-OR GMBH's servers and all electronic data traffic between the server and the customer are SSL-encrypted (Secure Socket Layer technology). This is a widely recognized, state-of-the-art security technology used in the Internet. All the data that you entrust to LIQUID-OR GMBH is passed through this secure and encrypted SSL connection.

All personal data are password-protected and sent only encrypted. Furthermore, LIQUID-OR GMBH requires its employees and agents to uphold data protection and confidentiality.

For the security of your data during transmission, LIQUID-OR GMBH uses the latest encryption technologies (such as SSL) over HTTPS. To protect your data from unauthorized access, our data processing and storage systems are protected by a firewall.

Storage period

We store your data for as long as necessary to achieve the purposes described in this privacy policy. Depending on the nature of the data and the purposes of processing, the data may be stored for a longer period of time. We only store your data for as long as it is necessary for the purposes for which it was collected or for compliance with legal and regulatory requirements.

You can find more detailed information on the storage periods in the sections where we describe the purposes of data processing. In general, we keep your data for as long as you have an account with us or as long as it is necessary to provide our services to you. If you no longer wish to use our services, you can request the deletion of your data, provided that we are not required by law or regulation to keep it for a longer period of time.

If you have any questions about the specific retention periods for certain types of data, please contact our Data Protection Officer.

Changes to this Privacy Policy

LIQUID-OR GMBH reserves the right to change this Privacy Policy at any time to reflect technological advances, legal and regulatory changes, and good business practices. If LIQUID-OR GMBH makes significant changes to this Privacy Policy, it will notify you through appropriate means, such as by email, on our website, or through other communication channels.

By continuing to use our services or website after such changes are made, you are deemed to have agreed to such changes. If you do not agree with the terms of this Privacy Policy, as amended from time to time, in whole or in part, please do not continue to use our services or website.

Data Protection Officer

If you have any questions or concerns about this Privacy Policy or our data processing practices, or if you wish to exercise your rights as described above, please contact our Data Protection Officer:

Data Protection Officer: Name: Leon Lüscher Address: Dorfstrasse 7, 4656 Starrkirch-Wil Email: info@liquid-or.com

The most recent version of this Privacy Policy is dated 01.09.2023. This Privacy Policy is effective as of 01.09.2023.

​General Data Protection Regulation

General Data Protection Regulation