Jetzt bestellen
Go to homepage Go to homepage Go to homepage Go to homepage
Menu

Data Protection

PREAMBLE

This Privacy Policy explains which personal data we collect, the purposes for which we process it and the extent of such processing. This policy applies to all processing of personal data in connection with our services, particularly on our websites and external online presences, such as our social media profiles.

Last updated: 1 January 2026

All references to persons apply equally to all genders.

DATA CONTROLLER AND DATA PROTECTION OFFICER

SC-International AG
Neugasse 26
9000 St. Gallen
Switzerland

Data Protection Officer: Ms Ingrid Bregenzer
E info@swiss-color.ch
T +41 71 663 77 77

DATA PROCESSED AND PURPOSES

We process personal data for contract performance, billing, the enforcement of contractual claims, customer service and advertising purposes. In particular, we process customer master data, payment data, contact data, content data and contract data. We also collect and use usage data, metadata, communication data and log data to provide our online services, make them user-friendly and ensure the security of our systems. In addition, this data is used to respond to enquiries, communicate through various channels and conduct direct marketing. This includes managing and organising user enquiries (e.g. by email, messenger or telephone) and sending marketing communications by email, post, telephone or fax in accordance with legal requirements.

Data processed:

  • Customer master data (e.g. name, address, customer number)
  • Contact data (e.g. postal and email addresses, telephone numbers)
  • Usage data (e.g. page views, clicks, click paths, time spent, devices used, content and features used, interactions with content)
  • Payment data (bank details, credit card number, invoices, payment history)
  • Metadata and communication data (e.g. IP addresses, time information, technical information)
  • Content data (e.g. messages and posts, including authorship and timestamps)
  • Contract data (e.g. subject matter of the contract, term, customer category)
  • Log data (e.g. login times, access logs)

In addition to communication with users and prospective customers, data processing serves to conduct prize draws and competitions, measure audience reach, carry out tracking, create audience segments, measure conversions and track affiliate referrals. We also use the data for office and organisational procedures, business administration processes, surveys, public relations, sales promotion and direct marketing.

Purposes of processing:

  • Contract performance (processing and fulfilling orders, meeting contractual obligations)
  • Business processes (organisation and business administration)
  • Communication (e.g. contact enquiries, follow-up questions, public relations, direct marketing, targeted advertising placement)
  • Optimising our online services (e.g. audience measurement and user analysis, feedback from surveys using online forms)
  • Conducting prize draws and competitions
  • Security measures (protection against misuse and safeguarding data)

Data subjects include service recipients, clients, users, communication partners, prospective customers and participants in prize draws, competitions, educational programmes and courses.

LEGAL BASIS FOR DATA PROCESSING

Our data processing is based on the following legal bases under the GDPR (EU General Data Protection Regulation) and the Data Protection Amendment Act 2018. In addition to the GDPR, national data protection legislation in your country of residence or ours may apply.

  • Consent: Processing personal data with the data subject's consent for specific purposes.
  • Contract performance: Processing to perform a contract or take steps prior to entering into a contract.
  • Legal obligation: Processing to comply with legal requirements. 
  • Legitimate interests: Processing to safeguard legitimate interests, provided that these do not outweigh the rights of the data subject.


Application of the GDPR and the Swiss FADP:
This Privacy Policy takes into account both the GDPR and the Swiss Federal Act on Data Protection (FADP). We use GDPR terminology to ensure consistent understanding. Within the scope of the Swiss FADP, the legal meaning of these terms continues to be governed by its provisions.

DATA RETENTION PERIOD

We process your personal data (address, email address, telephone number), where necessary, for the duration of the entire business relationship (from the initiation and performance of a contract through to its termination) and beyond in accordance with statutory retention and documentation requirements arising, among other things, from the Austrian Commercial Code (UGB) and the Austrian Federal Fiscal Code (BAO), as well as until the conclusion of any legal dispute and throughout ongoing statutory warranty and guarantee periods, etc.

We process your personal data (address, email address, telephone number) for the duration of the entire business relationship (from the initiation and performance of a contract through to its termination) and beyond in accordance with statutory retention and documentation requirements. These arise, among other things, from the Austrian Commercial Code (UGB) and the Austrian Federal Fiscal Code (BAO). Data is also retained until the conclusion of any legal dispute and throughout ongoing statutory warranty and guarantee periods.

Personal data that we process is deleted as soon as the underlying consent is withdrawn or there are no further legal grounds for processing. This applies where the original purpose of processing no longer exists or the data is no longer required. Data that must be retained for commercial or tax law reasons or for the pursuit of legal claims is processed exclusively for those purposes.

Retention periods are determined by legal requirements:

  • 10 years: Books, records, annual financial statements, inventories, management reports, opening balance sheets, accounting vouchers, invoices and all necessary working instructions and organisational documents.
  • 6 years: Business records such as commercial and business correspondence, price labels, hourly wage slips and similar documents.
  • 3 years: Data used to handle potential statutory warranty and compensation claims and related enquiries, in accordance with the standard limitation period.

These periods generally begin at the end of the calendar year in which the event triggering the period occurs. In the case of ongoing contractual relationships, this is the date on which the contract ends.

Right to withdraw consent:
Your express consent is required for the processing of your data. As a general rule, we do not process data relating to minors and assume that you are at least 14 years old or have the consent of your legal representative.

Under the General Data Protection Regulation (GDPR), you may exercise various rights against us at any time. These are set out, in particular, in Articles 15 to 21 GDPR:

  • Right to object: You may object at any time, on grounds relating to your particular situation, to the processing of your personal data where such processing is based on Article 6(1)(e) or (f) GDPR. This also applies to profiling based on these provisions. Where your personal data is used for direct marketing, you have an unconditional right to object to processing for this purpose, including profiling insofar as it is related to such direct marketing.
  • Withdrawal of consent: You have the right to withdraw your consent to the processing of your personal data at any time with effect for the future.
  • Right to rectification: You may request the correction of inaccurate personal data or the completion of incomplete personal data in accordance with legal requirements.
  • Right to erasure and restriction of processing: You have the right to request the erasure of your personal data without undue delay where the legal conditions are met. Alternatively, you may request that the processing of your data be restricted where permitted by law.
  • Right of access and right to data portability: You have the right to request confirmation as to whether your personal data is being processed and to obtain access to that data. You may also request a copy of the data being processed. In accordance with legal requirements, you may also request that your data be provided in a structured, commonly used and machine-readable format or transmitted to another controller where technically feasible.
  • Right to lodge a complaint: If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the Austrian Data Protection Authority (Wickenburggasse 8–10, 1080 Vienna, email: dsb@dsb.gv.at).

If you have any questions, wish to withdraw consent or request rectification, or have any other concerns regarding the processing of your data, you may contact us at any time at the following email address: info@swiss-color.ch or write to: SC-International AG, Neugasse 26, 9000 St. Gallen.

ONLINE SHOP PURCHASES AND CONTRACT PROCESSING

When you shop in our online shop at https://www.swiss-color.com, we store various data using cookies, including customer master data, payment data and technical information about our customers and prospective customers. This data processing is necessary to enable you to use the online shop, place orders, take steps prior to entering into a contract and fulfil legal obligations. Without this data, a contract cannot be concluded. The data collected also serves administrative purposes and contributes to the security of our business partners and business operations. This enables us to ensure a smooth and secure ordering process while protecting your data.

Data is disclosed to third parties only to the extent necessary, for example to fulfil legal obligations or where there is a legitimate interest.

  • Banks and payment service providers: To process payments.
  • Transport companies and shipping service providers: To deliver the goods ordered.
  • Tax advisers: To fulfil our tax obligations.

All third-party providers have committed to complying with data protection requirements. Data processing agreements pursuant to Article 28 GDPR are in place with the service providers. Further information about the processors may be requested at info@swiss-color.ch.

Events:
When organising and holding events, we process participant data to enable participation and provide services. Where special categories of data (e.g. health data) are processed, this is done on the basis of consent, for security purposes or on the basis of information that is apparent in the context of the event.

NEWSLETTER

Newsletters and electronic notifications:
We send newsletters containing information about our services, promotions and offers. Your email address is generally sufficient to subscribe free of charge. We may optionally ask for your name or other details to personalise the content.

Objection (opt-out):
You may unsubscribe from the newsletter at any time. An unsubscribe link is included in every email. Alternatively, you may use the contact options provided, preferably email.

Erasure and restriction of processing:
We may retain unsubscribed email addresses for up to three years to provide evidence of previously granted consent. This data is processed exclusively to defend against potential claims. You may request individual deletion at any time, provided that the existence of consent is confirmed. To ensure that objections continue to be respected, we may store email addresses on a blocklist.

Logging and mailing service providers:
The subscription process is logged for evidential purposes. Where we engage service providers such as Mailchimp to send emails, we do so on the basis of our legitimate interests in a secure and efficient system.

Relevant services:
Mailchimp

SOCIAL NETWORKS (SOCIAL MEDIA)

We maintain channels on social networks and process user data to communicate with active users or provide information. User data may be processed outside the European Union, which could entail potential risks for users, for example regarding the enforcement of their rights.

Within social networks, user data is generally used for market research and advertising purposes. For example, usage profiles are created based on user behaviour to display targeted advertisements both within and outside the networks. Cookies are used for this purpose to store users' behaviour and interests. In some cases, this data may be stored across devices, particularly where users are members of the respective platforms and remain logged in.

For detailed information about data processing and options for objecting (opting out), please refer to the privacy policies of the respective platform operators. For enquiries or to exercise your rights, you are also welcome to contact us at the following email address: info@swiss-color.ch or write to: SC-International AG, Neugasse 26, 9000 St. Gallen.

Relevant services:

REGISTRATION, USER ACCOUNT AND AFFILIATE PROGRAMME

Registration and user account:
Users may create a personal user account to make full use of our services. During registration, we collect and process the required information, such as username, password and email address, to provide the account and fulfil contractual obligations. When the user account is used, we also store the IP address and the times of individual user actions. This helps protect against misuse and unauthorised use and is based on our legitimate interests. This data is disclosed to third parties only where required by law or to enforce claims.

Users may be informed by email about relevant matters, such as technical changes or security-related notices. When a user account is terminated, all associated data is deleted unless a statutory retention obligation applies. Users are responsible for backing up their data before the contract ends, as we are entitled to delete the data irreversibly.

Affiliate programme:
We offer an affiliate programme in which users acting as "affiliates" receive commissions or benefits by referring others to our offers. Referrals are made through individual links or discount codes assigned to affiliates to track their success.

For attribution purposes, we store information about whether a user has followed an affiliate link and whether this has resulted in a business transaction or other use of our services. This data processing serves exclusively to calculate commissions, and the data is deleted as soon as it is no longer required.

Affiliate links may include specific values stored in the link itself or in cookies. This enables us to clearly identify the source of a business transaction.

PAYMENT METHODS

In the context of contractual relationships, legal obligations or our legitimate interests, we offer secure and efficient payment methods using payment service providers in addition to banks and credit institutions.

The data processed by payment service providers includes customer master data (e.g. name, address), banking data (e.g. account numbers, credit card numbers), passwords, transaction authentication numbers (TANs), security codes and transaction-related information. This data is necessary to process payments. The data entered is processed and stored exclusively by the payment service providers. We do not receive account or credit card information, but only confirmation or rejection of the payment. In some cases, payment service providers transmit data to credit reference agencies for identity and creditworthiness checks.

Payments are subject to the terms and conditions and privacy policies of the respective payment service providers, which are available on their websites or apps. We recommend consulting these for further information and to exercise your rights (withdrawal of consent, access, etc.).

Relevant services:

  • Apple Pay
  • Klarna
  • Mastercard
  • PayPal
  • Visa

WEB ANALYTICS, OPTIMISATION AND ONLINE MARKETING

As part of our web analytics, optimisation and online marketing activities, we process personal data to improve our online services, enhance usability and place targeted advertising content. Processing is carried out in accordance with applicable data protection provisions, either on the basis of users' consent or our legitimate interests.

Web analytics and optimisation:
Web analytics is used to evaluate visitor traffic and measure audience reach. We collect pseudonymised data, such as pages visited, click paths, usage intensity and technical information (e.g. device types, operating systems). Using testing methods such as A/B tests, we optimise our content and features to improve usability.

For this purpose, we use IP masking so that users' IP addresses are processed in pseudonymised form. Location data is processed only with users' express consent.

Online marketing:
We also create pseudonymised user profiles to market advertising space and display interest-based content. Information such as content viewed, networks used and technical details is stored and analysed. Cookies or similar methods enable this data to be analysed and read again on other websites using the same methods.

Conversion measurement allows us to determine which of our marketing activities have led to the desired outcome, such as the conclusion of a contract. This processing also takes place on a pseudonymous basis. Directly identifiable user data is processed only where users have given additional consent, for example as members of a social network.

In this context, please also refer to the information about our cookies / cookie settings.

Relevant services:

  • Google Analytics (visitor traffic analysis and audience measurement)
  • Google Ads and conversion measurement (analysis of advertising campaign performance)


PRIZE DRAWS, COMPETITIONS AND SURVEYS

As part of prize draws, competitions and surveys, we process participants' personal data in accordance with applicable data protection provisions. Processing takes place where it is contractually necessary to provide, conduct and administer the respective activity, where participants have given their consent or where it serves our legitimate interests, such as ensuring the security of the activities or protecting against misuse.

Prize draws and competitions:
Personal data, such as names, contact details or entries, is processed to enable prize draws to be conducted and administered. Where entries are published as part of the activity (e.g. for voting or reporting purposes), participants' names may also be visible. Participants may object to this publication at any time.

If prize draws take place on online platforms such as Facebook or Instagram, the terms of use and privacy policies of the respective platforms also apply. Please address enquiries about the prize draw directly to us. Participants' data is deleted after the activity has ended as soon as it is no longer required. Winners' data may be retained for longer for legal reasons, for example for up to three years in the case of non-cash prizes to handle statutory warranty claims.

Questionnaires and surveys:
Our surveys are used to collect information in anonymised form, for example through feedback forms or online questionnaires. Personal data is processed only where necessary to provide and conduct the survey, for example to display it in the browser or allow it to be resumed.

Relevant services:
We may use services such as Google Forms for surveys. The respective privacy policies of the service platform, such as Google Ireland Limited, apply.

DATA SECURITY AND TRANSFERS

SC Cosmetics Handels GmbH implements appropriate technical and organisational security measures in accordance with legal requirements, taking into account the state of the art, implementation costs and the nature, scope, context and purposes of data processing. These measures ensure a level of security appropriate to the risk, protecting personal data against accidental or intentional manipulation, loss, destruction and unauthorised access.

These measures include, in particular, safeguarding the confidentiality, integrity and availability of data by controlling physical and electronic access. We take data protection into account when selecting hardware, software and procedures, in accordance with the principles of data protection by design and by default.

When processing personal data, it may be necessary to transfer it to other bodies, companies or individuals, such as providers of integrated IT services. In such cases, we ensure that legal requirements are observed and enter into agreements to protect your data. Within our organisation, we may transfer personal data to other departments or grant them access where this is necessary to fulfil contractual obligations or is based on legitimate interests.

CHANGES AND UPDATES

Please review our Privacy Policy regularly. We make changes when adjustments to data processing become necessary. If your involvement (e.g. consent) or individual notification is required, we will inform you accordingly.

This website uses cookies to ensure the best experience possible. More information...
Privacy policy | Imprint