Privacy Policy

Privacy Policy

for the online shop PETIT STELLOU®
operated by Lillyroom GmbH

 

1. Data Controller

PETIT STELLOU®
Lillyroom GmbH
Sägestrasse 1b
CH-8157 Dielsdorf
Switzerland
E-mail: info@petit-stellou.com

 

---

 

2. General Information on Data Processing

The protection of your personal data is very important to us. We process your personal data exclusively in accordance with the applicable data protection regulations of Switzerland (revDSG) and the EU General Data Protection Regulation (GDPR).

Personal data is any information that can be used to personally identify you.

 

---

 

3. Which Data We Collect

• First and last name

• Billing & shipping address

• E-mail address

• Telephone number (optional)

• Payment data (processed via payment providers, not stored by us)

• IP address

• Order & usage data

When creating a customer account, your data is stored to facilitate future orders. Payment data is processed exclusively via certified payment providers.

 

---

 

4. Purpose of Data Processing

• Order processing

• Payment processing

• Shipping & returns

• Customer service

• Newsletter & marketing

• Analysis & optimization of the online shop

 

---

 

5. Legal Bases

• Performance of contract (Art. 6 para. 1 lit. b GDPR)

• Legal obligation (Art. 6 para. 1 lit. c GDPR)

• Consent (Art. 6 para. 1 lit. a GDPR)

• Legitimate interest (Art. 6 para. 1 lit. f GDPR)

 

---

 

6. Payment Providers

• Shopify Payments (credit cards: VISA, Mastercard, AMEX)

• PayPal

• Klarna (depending on country)

• TWINT (Switzerland only)

• Apple Pay (device dependent)

Payment processing is carried out exclusively via these external providers. Their respective privacy policies apply.

 

---

 

7. Shipping & Fulfillment

• Switzerland & Liechtenstein: Lillyroom GmbH

• EU: No Border E-Commerce GmbH (shipping & returns)

These service providers process personal data exclusively on our behalf in accordance with Art. 28 GDPR.

 

---

 

8. Newsletter & Marketing

We use Klaviyo to send our newsletter. Registration takes place via the double opt-in procedure. You can unsubscribe at any time via the unsubscribe link in the newsletter.

 

---

 

9. Tracking & Analysis

• Google Analytics (GA4)

• Google Tag Manager

• Google Ads Conversion Tracking

• Meta Pixel (Facebook/Instagram)

• Shopify Analytics

These services are used exclusively on the basis of your consent via the Shopify standard cookie banner.

 

---

 

10. Profiling

To personalize offers and newsletter content, simple profiling may take place based on your usage behavior.

 

---

 

11. Cookies

Our website uses cookies. Cookies are small text files that are stored on your device and enable an analysis of website usage or are necessary for certain functions.

We distinguish the following categories of cookies:

Technically Necessary Cookies
These cookies are essential for the operation of our website and cannot be disabled. They enable basic functions such as shopping cart, checkout, security, site navigation and the storage of your cookie settings.
Legal basis: legitimate interest (Art. 6 para. 1 lit. f GDPR).

Statistics & Analysis Cookies
These cookies help us understand how visitors use our website in order to continuously improve our offering (e.g. page views, length of stay, devices used).
Typical services: Shopify Analytics, Klaviyo.
These cookies are only set with your explicit consent (Art. 6 para. 1 lit. a GDPR).

Marketing & Tracking Cookies
These cookies enable personalized advertising and the evaluation of our marketing campaigns (e.g. Meta Pixel, Google Ads).
These cookies are also only set with your consent (Art. 6 para. 1 lit. a GDPR).

Cookie Settings & Withdrawal
You can change or withdraw your cookie consent at any time via the cookie settings on our website. The corresponding link can be found in the cookie banner and in the footer under “Settings”.

Storage Duration
– Session cookies are automatically deleted when you close your browser.
– Persistent cookies remain stored until you delete them manually or they expire automatically.

Further information on the processing of personal data can be found in the other sections of this privacy policy.

 

---

 

12. Data Transfer to Third Countries

Data is transferred to the USA and Canada via Shopify, Google, Meta and Klaviyo on the basis of Standard Contractual Clauses (SCC) in accordance with Art. 46 GDPR.

 

---

 

13. Storage Period

• Order & accounting data: 10 years

• Newsletter data: until revocation

• Support inquiries: are generally deleted after 2 years

 

---

 

14. Your Rights

• Right of access

• Right to rectification

• Right to erasure

• Right to restriction of processing

• Right to data portability

• Right to withdraw consent

• Right to lodge a complaint with the competent supervisory authority

 

---

 

15. Changes to this Privacy Policy

We reserve the right to amend this privacy policy at any time.