Privacy Policy

namuk GmbH (Seehofstrasse 16, 8008 Zürich, entered in the commercial register of the Canton of Zurich under number CHE-100.955.425; address for correspondence: Seehofstrasse 16, 8008 Zürich), also known under the commercial name 'namuk', is the operator of the website www.namuk.com. We are responsible for the collection, processing and use of your personal data and for ensuring that the processing of data takes place in compliance with applicable data protection legislation.

Your trust is important for us, which is why we take privacy seriously and strive to ensure that there is an adequate level of data security. We naturally abide by the statutory provisions of the Data Protection Act (FADP), the Ordinance of 14 June 1993 to the Federal Act on Data Protection (DPO) the Telecommunications Act (TCA) and any other applicable provisions of Swiss or EU legislation governing data protection, in particular the General Data Protection Regulation (GDPR).

We kindly ask you to take note of the following information so that you are aware of the type of personal data we collect from you and the purposes for which it is used.

A. Data processing

1. when accessing our website

When you visit our website, our servers temporarily store each access in a log file. As with every connection to a web server, the following technical data is recorded without your intervention and stored by us until it is automatically deleted after six months at the latest:

the IP address of the requesting computer,
the name of the owner of the IP address range (usually your Internet access provider),
the date and time of access,
the website from which the access was made (referrer URL) with the search term used, if applicable,
the name and URL of the retrieved file,
the status code (e.g. error message),
the operating system of your computer,
the browser you use (type, version and language),
the transmission protocol used (e.g. HTTP/1.1) and
if applicable, your user name from registration/authentication.

This data is collected and processed to enable the use of our website (establishing a connection), to ensure long-term system security and stability, to enable the optimization of our website, and for internal statistical purposes. This constitutes our legitimate interest in data processing within the meaning of Art. 6 (1) (f) GDPR.

The IP address will also be evaluated together with other data for the purpose of investigating and defending against attacks on the network infrastructure or other unauthorized or abusive use of the website. If necessary, it will be used in criminal proceedings to identify and prosecute the users concerned under civil and criminal law. This constitutes our legitimate interest in data processing within the meaning of Art. 6 (1) (f) GDPR.

2. when using our contact form

You have the option of using a contact form to contact us. To do so, you must provide the following information:

E-mail address
message

We use this and other data you voluntarily provide only to respond to your contact request in the best possible and personalized way. Therefore, the processing of this data is necessary to implement pre-contractual measures within the meaning of Art. 6 (1) (b) GDPR or is in our legitimate interest pursuant to Art. 6 (1) (f) GDPR.

3. when registering for our newsletter

You have the option of subscribing to our newsletter on our website. Registration is required via email address. Registration is done using a so-called double opt-in process, meaning that after registration, you will receive an email asking you to confirm your registration. We process your email address exclusively to personalize the information and offers sent to you and to better tailor them to your interests.

By registering, you consent to us processing the data you provide for the regular delivery of the newsletter to the address you provided, for statistical analysis of user behavior, and for newsletter optimization. This consent constitutes our legal basis for processing your email address within the meaning of Art. 6 (1) (a) GDPR.

The newsletter is sent via »Klaviyo«, 225 Franklin St, Boston, MA 02110, USA.
The email addresses of our newsletter recipients, as well as their other data described in this notice, are stored on Klaviyo's servers in the USA. Klaviyo uses this information to send and evaluate the newsletter on our behalf. Furthermore, according to Klaviyo's own information, Klaviyo may use this data to optimize or improve its own services, e.g., to technically optimize the delivery and presentation of the newsletter or for commercial purposes, to determine which countries the recipients come from. However, Klaviyo does not use the data of our newsletter recipients to contact them directly or to pass it on to third parties.

We trust in Klaviyo's reliability and IT and data security. Klaviyo is certified under the US-EU Privacy Shield Framework and is therefore committed to complying with EU data protection regulations. Furthermore, we have concluded a Data Processing Agreement with Klaviyo. This is a contract in which Klaviyo undertakes to protect our users' data, to process it on our behalf in accordance with its privacy policy, and, in particular, not to share it with third parties. You can find Klaviyo's privacy policy in English here.

At the end of each newsletter, you will find a link that allows you to unsubscribe at any time. After unsubscribing, your personal data will be deleted. This also revokes your consent to receive the newsletter via Klaviyo and the statistical analyses. Unfortunately, it is not possible to revoke your consent to receive the newsletter via Klaviyo or to the statistical analyses separately.

4. when opening a customer account

To place orders on our website, you can order as a guest or open a customer account. When registering for a customer account, we collect the following data:

Form of address
First and Last Name
E-mail address
Postal address (when an order is placed)
E-mail address
Password

This data is collected to provide you with password-protected, direct access to your basic data stored with us. There, you can view your past and current orders or manage or edit your personal data.

The legal basis for processing the data for this purpose is the consent you have given, partly the execution of (pre-)contractual obligations and our legitimate interest according to Art. 6 (1) (a), (b) and (f) GDPR.

5. upon receipt of your application

You have the option of applying spontaneously or for a specific job opening. We generally require the following information and documents:

First and Last Name
Postal address
Telephone or mobile number
E-mail address
Birth date
Nationality / Residence permit
Cover letter
CV

We use this and other data you voluntarily provide to process your application. Application documents from unsuccessful applicants in connection with a specific application for a vacant position will be deleted no later than three months after the position has been filled. Your application documents will only be deleted after 24 months if you have given us your consent for further storage. For applications that result in a position being filled, the documents will be transferred to our employee administration system.
The legal basis for processing your data for this purpose is therefore our legitimate interest, the fulfillment of (pre-)contractual obligations and, in part, your consent in accordance with Art. 6 (1) (a), (b) and (f) GDPR.

6. when conducting a competition

We offer competitions on our website on various occasions. We generally require the following information from you:

First and Last Name
Birth date
Address, email address, telephone number and other contact details

This and any other data you provide expressly and voluntarily will be used to determine, notify, and, if applicable, publish the winners of competitions and prize draws. The legal basis for processing your data is your consent and our legitimate interest pursuant to Art. 6 (1) (a) and (f) GDPR.

7. Cookies

Cookies help in many ways to make your visit to our website easier, more enjoyable, and more meaningful. Cookies are information files that your web browser automatically stores on your computer's hard drive when you visit our website.
For example, we use cookies to temporarily store your selected services and entries when filling out a form on the website, so you don't have to repeat the entry when accessing another subpage. Cookies may also be used to identify you as a registered user after you have registered on the website, without you having to log in again when accessing another subpage.

Most internet browsers automatically accept cookies. However, you can configure your browser to prevent cookies from being stored on your computer or to always notify you when you receive a new cookie. The following pages explain how to configure cookie processing in the most common browsers:

Microsoft's Windows Internet Explorer
Microsoft's Windows Internet Explorer Mobile
Mozilla Firefox
Google Chrome for Desktop
Google Chrome for Mobile
Apple Safari for Desktop
Apple Safari for Mobile

Deactivating cookies may result in you not being able to use all the functions of our website.

B. Use of your data for advertising purposes

For the purpose of tailoring our website to meet your needs and continuously optimizing it, we use various tracking and retargeting technologies:

1. Google Analytics, Google Remarketing, Google Tag Manager

We use the web analysis service Google Analytics from Google Inc., Amphitheatre Parkway, Mountain View, CA 94043, USA, on our website. We use Google Analytics to continuously optimize our offering and tailor it to user needs. Google Analytics uses cookies (see section 7), which are stored on your computer and enable an analysis of website usage. The information generated by the cookie about your use of this website, in particular

the navigation path a visitor takes on the page
the length of time spent on the website or subpage
the next website accessed after visiting the website
the country, region or city from which access is made
the device (type, version, color depth, resolution, width and height of the browser window)
returning or new visitors
the type and version of the Internet browser used
the operating system used
the website from which access is made (so-called referrer URL)
the IP address of the accessing computer (anonymized)
the time of the server request
the actions on the website (clicks, downloads, purchases)

are transferred to Google servers in the USA and stored there. Google will use this information to evaluate your use of the website, to compile reports on website activity for us, and to provide other services related to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where third parties process the data on Google's behalf. Google will never associate your IP address with any other data held by Google. IP addresses are anonymized so that they cannot be assigned to you as a person. Google is listed as a Privacy Shield participant. The Privacy Shield agreement between the EU and the USA guarantees minimum standards for data protection.

We also use Google Remarketing (so-called DoubleClick by Google) for online advertising and to evaluate the use of our website. Through the combined use of first-party and third-party cookies, reports can be evaluated on how ad impressions relate to website visits. Third parties, including Google, have the ability to place ads on websites and to target and optimize them according to demographic characteristics and interests (for example, age, gender, or interests) based on previous visits to the website. This data may be obtained from Google or from visitor data from third parties.

We also use Google Tag Manager to manage services within the scope of usage-based advertising. The tool itself is a cookie-free domain and does not collect any personal data. Instead, it triggers other tags, which in turn may collect data. If you have deactivated this at the domain or cookie level, this deactivation will remain in effect for all tracking tags implemented with Google Tag Manager.

By using our website, you agree to the processing of your data in the manner and for the purposes set out above.
You have the option to prevent your data from being analyzed by Google Analytics. If you wish, please follow this link to download and install a browser plug-in. Further information on Google's privacy policy can be found here.
The legal basis for processing the data for this purpose is our legitimate interest pursuant to Art. 6 (1) (f) GDPR.

2. Facebook Connect

We use Facebook Connect, a service provided by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA, or, if you are based in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Facebook Connect allows users to log in to other websites, apps, and services using their Facebook identity. This other service receives access to certain preferences and links stored in Facebook, which it can use to base its own offerings. Facebook can use data about users' actions on such other services to recognize visitors to our website on its services and to provide them with personalized offers based on their interests and preferences.
For more information about the retargeting tool used, please see Facebook’s privacy policy at this link.
The legal basis for processing the data for this purpose is our legitimate interest pursuant to Art. 6 (1) (f) GDPR.

3. Facebook Custom Audience

We use Facebook Custom Audience, a service provided by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA, or, if you are based in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. When using Custom Audience, a non-reversible and non-personal checksum (hash value) is generated from your usage data, which can be transmitted to Facebook for analysis and marketing purposes.
For more information about how Facebook Pixel works and how Facebook ads are displayed in general, please see Facebook’s privacy policy at this link.
The legal basis for processing the data for this purpose is our legitimate interest pursuant to Art. 6 (1) (f) GDPR.

4. Creating usage profiles

In order to provide you with personalized services and information, we use and analyze the data we collect about you. Analyzing your user behavior may lead to the creation of a so-called user profile.
The legal basis for processing the data for this purpose is our legitimate interest pursuant to Art. 6 (1) (f) GDPR.

5. Clear Attribution

Clear Attribution

We use the services of Klar (Klar Insights GmbH, Marktstr. 18, 80802 Munich, Germany) on our website. Klar collects, processes, and stores data on this website and its subpages for reach measurement and statistical analysis on our behalf. This collection is based on the following legal basis:

If the user has given his consent in accordance with Article 6 (1) sentence 1 a GDPR and Section 25 (1) sentence 1 TTDSG, the data to be processed will be collected on a user-related basis.

Different cookies are used for the different types of data collection mentioned above in order to ensure the respective type of data collection.

Cookie - objection

To opt out of Klar's use, please use this link . This will set a cookie named "do_not_track" from the domain "namuk.com." Please do not delete this cookie, as otherwise we cannot guarantee that you will not be tracked by Klar.

Information on data protection and data usage by Klar can be found on the following website: https://www.getklar.com/data-protection.

C. Social media functionalities

Our website contains so-called social plugins. These include "Like buttons" or similar social media features, as well as "dynamic" links to our social media profiles on the respective social media networks. You can recognize the plugins by the fact that they are displayed in the form of the logo of the respective network.

If you are logged in to the social network and visit our website, the social network can directly associate your visit with your social media account. If you interact with the plug-ins, the corresponding information is also transmitted directly to a server of the provider and stored there. The information may also be published on the social network and possibly displayed to other users of the social network (e.g., when the Like button is pressed).

The provider of the social network may use this information for the purposes of advertising, market research, and tailoring the respective offering to meet your needs. For this purpose, usage, interest, and relationship profiles may be created, e.g., to evaluate the use of our website with regard to advertisements, to inform other users about your activities on our website, and to provide other services related to the use of the social network.

The purpose and scope of data collection and the further processing and use of the data by the providers of the social networks as well as the user's rights and setting options for protecting his or her privacy can be found in the data protection information of the respective provider.

If you do not want the social network provider to assign your data to your account, you must log out of the social network before activating the plug-ins or before visiting our website.
This website contains plugins from the following providers:

Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA, or, if you are based in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Instagram Inc., 1601 Willow Road, Meno Park, CA 94025, USA
Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA,
Google+, Google Inc., Amphitheater Parkway, Mountain View, CA 94043, USA,
Linkedin Ltd., Dublin 2, Ireland,
YouTube, a service operated by Google Inc.

You can object to this data processing at any time by using the opt-out options mentioned in this section.
The legal basis for this data processing is our legitimate interest pursuant to Art. 6 (1) (f) GDPR.

D. Storage and exchange of data with third parties

1. Central storage and linking of data

We store the data specified in the preceding paragraphs in a central electronic data processing system. The data concerning you is systematically recorded and linked to process your orders and provide the contractual services. For this purpose, we use software from Magento, 54 N Central Ave Ste 200, Campbell, CA 95008, USA. We base the processing of this data within the scope of the software on our legitimate interest in customer-friendly and efficient customer data management within the meaning of Art. 6 (1) (f) GDPR.

2. Retention period

We only store personal data for as long as necessary to use the tracking services mentioned above and for further processing within the scope of our legitimate interests. Contractual data is retained for longer periods as required by statutory retention periods.

Retention obligations that require us to retain data arise from accounting and tax law. According to these regulations, business communications, concluded contracts, and accounting documents must be retained for up to 10 years. If we no longer need this data to provide our services to you, the data will be blocked. This means that the data may then only be used for accounting and tax purposes.

3. Transfer of data to third parties

We will only share your personal data if you have expressly consented, if there is a legal obligation to do so, or if this is necessary to enforce our rights, in particular to enforce claims arising from the contractual relationship. Furthermore, we will share your data with third parties if this is necessary for the use of the website and the execution of the contract (including outside the website), namely the processing of your order. Various third-party service providers are explicitly mentioned in this privacy policy (e.g., in sections 3 and 8-10).

Finally, when you pay by credit card on the website, we forward your credit card information to your credit card issuer and the credit card acquirer. If you choose to pay by credit card, you will be asked to enter all mandatory information. The legal basis for the transfer of data is the fulfillment of a contract pursuant to Art. 6 (1) (b) GDPR. Regarding the processing of your credit card information by these third parties, we ask you to also read the general terms and conditions and the privacy policy of your credit card issuer.

Klarna's payment options: In order to offer you Klarna's payment options, assess your eligibility for their payment options, and tailor payment options to your needs, we may share your personal data in the form of contact and order details with Klarna during the checkout process. Your personal data will be treated in accordance with applicable data protection laws and in accordance with the information in Klarna's privacy policies ( de , fr , it , or en versions).

4. Transfer of personal data abroad

We are entitled to transfer your personal data to third-party companies (contracted service providers) abroad for the purposes of the data processing described in this privacy policy. These companies are subject to the same data protection obligations as we are. If the level of data protection in a country does not correspond to the Swiss or European level, we contractually ensure that the protection of your personal data corresponds to that in Switzerland or the EU at all times.

E. Further information

1. Right to information, rectification, erasure and restriction of processing; right to data portability

You have the right to request information about the personal data we store about you. In addition, you have the right to correct inaccurate data and the right to delete your personal data, provided that this does not conflict with a statutory retention period or a legal basis permitting us to process the data.

You also have the right to request that we return the data you have provided to us (right to data portability). Upon request, we will also transfer the data to a third party of your choice. You have the right to receive the data in a common file format.
You can contact us for the aforementioned purposes via this email address. We may, at our sole discretion, request proof of identity to process your requests.

2. Data security

We use appropriate technical and organizational security measures to protect your personal data stored with us against manipulation, partial or complete loss, and unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

You should always treat your access data confidentially and close the browser window when you have finished communicating with us, especially if you share the computer with others.
We also take internal data protection very seriously. Our employees and the service providers we engage are obligated to maintain confidentiality and comply with data protection regulations.

3. Note on data transfers to the USA

For the sake of completeness, we would like to inform users residing or based in Switzerland that surveillance measures are in place in the USA by US authorities that generally allow the storage of all personal data of all individuals whose data has been transferred from Switzerland to the USA. This occurs without differentiation, restriction, or exception based on the purpose pursued, and without an objective criterion that would allow US authorities to limit access to the data and its subsequent use to very specific, strictly limited purposes that could justify the interference associated with both access to and use of this data.

We would also like to point out that in the USA, data subjects from Switzerland have no legal remedies available that allow them to access their data and to request its correction or deletion, nor does there exist any effective judicial protection against general access rights of US authorities. We explicitly draw the data subject's attention to this legal and factual situation in order to make an informed decision regarding consent to the use of their data.

We would like to point out to users residing in an EU member state that, from the European Union's perspective, the USA does not have an adequate level of data protection – due, among other things, to the issues mentioned in this section. Where we have explained in this privacy policy that recipients of data (such as Google) are based in the USA, we will ensure that your data is protected at an appropriate level by our partners either through contractual arrangements with these companies or by ensuring that these companies are certified under the EU or Swiss-US Privacy Shield.