1. Name and contact details of the controller and company Data Protection Officer
The data protection officer of kedlow.com can be reached under: contact@kedlow.com
2. Collection and storage of personal data, the nature and purpose of that, and use of the data
a) When you visit the website
When you call our website www.kedlow.com the browser used on your device automatically sends information to our website’s server. This information is stored temporarily in a log file. The following information is recorded without any action on your part and is stored until it is automatically erased:
- The IP address of the computer system calling the site
- The date and time of access
- The name and URL of the file called
- The website from which you accessed our site (referrer URL)
- The browser type and version and other information sent by the browser (such as your computer’s operating system, the name of your access provider, geographic origin, language setting, etc.).
- These data are processed by us for the following purposes:
- To ensure a connection to the website is established smoothly
- To ensure our website is convenient to use
- To analyse system security and stability, and
For other administrative purposes. The legal basis for processing of the data is Article 6 (1) sentence 1 point (f) GDPR. Our legitimate interests are founded on the above-listed purposes for collection of the data. We never use the data we collect for the purpose of identifying you.
We also use cookies and analytics services when you visit our website. You can find more details in sections 4 and 5 of this Privacy Policy.
b) Ordering as a guest
When you wish to order one of our products as a guest on our website, we will collect the following information:
Your civil status (Mr., Mrs., etc….) as well as your Christian and Surnames.
A current valid email address and home address
Payment details associated with your chosen payment method (e.g. credit card details, bank account details, PayPal details)
These details are collected:
To enable us to identify you and the quality of your contractual partnership.
To enable us to confirm the data as collected.
To process the payment for your order.
To enable us to manage any questions arising concerning product guarantees or other similar queries.
c) If you set up a user account
You have the option of setting up a password-protected user account, in which we store your personal data. The purpose of that is to enable easier, faster and more personal handling of your purchases and thus ensure maximum convenience for you when you place orders.
If you wish to set up a password-protected user account, we need the following information from you:
- First name and surname
- Your address
- A valid e-mail address.
You must also select a password when setting up a user account. It in conjunction with your e-mail address allows you to access your user account. You can view and change the data stored in your user account at any time.
You can also provide your telephone number so that queries can be clarified more quickly. That is voluntarily and not required for setting up the user account.
We store your personal data in a user account only subject to your voluntary consent in accordance with Article 6 (1) sentence 1 point (a) GDPR.
It is not necessary to create a user account in order to be able to use our site and to order goods from us. We offer you the option of placing orders as a guest (see section 2. b)). If you do that, however, you have to enter your data in full again each time you place an order.
After your user account has been deleted, your data are then erased automatically and not used further, unless we are required to store them for longer in accordance with Article 6 (1) sentence 1 (c) GDPR pursuant to retention and documentation obligations under fiscal and commercial law (such as the German Commercial Code (HGB), the German Penal Code (StGB) or the German Fiscal Code (AO)) or you have consented to further storage of them in accordance with Article 6 (1) sentence 1 point (a) GDPR. )
When you use our contact form
We offer you the possibility of contacting us using a form provided on the website if you have any questions, of whatever nature. You must specify a valid e-mail address and your first name and surname so that we know from whom the request is and can respond to it. You can furnish your telephone number voluntarily.
Data are processed for the purpose of contacting us on the basis of your voluntary consent in accordance with Article 6 (1) sentence 1 point (a) GDPR.
The personal data we collect when you use the contact form are automatically erased when your request has been dealt with.
3. Transmission of data to third parties
a) Your personal data are not transferred to third parties, for purposes other than those specified in the following.
b) For the performance of contracts
Your personal data will be forwarded to third parties if this is legally permissible and necessary according to Article 6 (1) sentence 1 point (b) GDPR for performing contracts with you. This includes in particular the forwarding of information to shipping companies for the purpose of delivering goods you have ordered. The third party may use the data given to it solely for the above purposes.
c) For handling payments
When fulfilling the contract, we sometimes work with payment service providers for handling payments. So that payments can be handled, it may be necessary to disclose the purchase amount and, if applicable, other data about you to the provider. The categories of data forwarded for this purpose differ according to the provider and the selected option. Where we forward personal data to providers, that is done to perform the contract and pursuant to our legitimate interests on the basis of Article 6 (1) sentence 1 points (b) and (f) GDPR. We have a legitimate interest within the meaning of the above regulation, namely that of being able to offer you the respective payment option. Details of the providers follow here:
PayPal: We offer handling of payments by means of the payment service provider PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg (“PayPal”). If you decide to pay using PayPal, you are taken to the PayPal website. You can log on there using your account data and instruct payment. After you are taken to the PayPal website, we have no access to the data collected by PayPal. You can find more information on data protection in relation to PayPal here.
Twint : we offer payment via the payment provider Twint Zurich TWINT AG Stauffacherstrasse 41 CH-8004 Zurich. We do not have access to the data collected by Twint.
Payment by bank transfer: your personal data is processed only by kedlow.com and our bank based in Lausanne (Switzerland).
4. Cookies and similar technologies
We use cookies or other similar features and technologies (such as pixel tags) on our site. These are small files which your browser automatically creates and are stored on your device (laptop, tablet, smartphone or the like) when you visit our site. Cookies do not cause any damage on your device and do not contain any viruses, Trojans or other malware. Information relating to the specific device used is stored in the cookie. However, that does not mean that we can directly identify you from that. We also use temporary cookies, which are stored on your device for a specific defined period of time, to optimise the user-friendliness of our site. When you visit our site again in order to make use of our services, we automatically recognise that you have previously visited us and what inputs and settings you made, meaning you do not have to enter them again. The data processed by these cookies are required for the above purposes in order to safeguard our legitimate interests and those of third parties in accordance with Article 6 (1) sentence 1 point (f) GDPR.
Most browsers automatically accept cookies. However, you can configure your browser so that no cookies are stored on your computer, or a message is always displayed before a new cookie is created. If, however, you completely disable cookies, you may not be able to use all the features of our website. We also use cookies and pixel tags to record statistics on use of our website and analyse them so as to optimise our offering for you (see section 5). They enable us to automatically recognise that you previously visited us the next time you call our site. These cookies and pixel tags are automatically erased after a defined time.
We use such cookies and pixel tags only if you have given your consent using the cookie management tool. We process the data processed by cookies and pixel tags on the basis of your consent in accordance with Article 6 (1) point (a) GDPR. You can withdraw your consent at any time with future effect using the cookie management tool. You can call the tool again at any time by clicking on “Cookie settings” at the bottom of the website.
5. Tracking and targeting with consent
The legal basis for the following tracking and targeting measures we use is your consent in accordance with Article 6 (1) sentence 1 point (a) GDPR.
Our objective with the tracking measures we use is to ensure our website is tailored to needs and is continuously optimised. We also use the tracking measures to record statistics on use of our website and analyse them so as to optimise our offering for you.
a) Google Analytics
As part of Analytics, information is used to evaluate use of the website, to compile reports on website activities and to provide other services relating to website and Internet use for the purposes of market research and tailoring these websites to needs. The IP addresses are anonymised so that they cannot be associated with a particular person (IP masking).
The user data recorded by means of cookies are automatically erased after 14 months.
6. Rights of data subjects
You have the right to:
demand, in accordance with Article 15 GDPR, information on and access to your personal data we have processed. In particular, you can demand information on the purposes of processing, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the length of time they are to be stored for, the existence of a right to rectification, erasure or restriction of processing of your data or to object to their being processed, the existence of a right to lodge a complaint, and the origin of your data if they have not been collected by us, as well as the existence of automated decision-making, including profiling, and any meaningful information about the details of that;
demand, in accordance with Article 16 GDPR, immediate rectification of inaccurate personal data we have stored concerning you and demand that incomplete personal data are completed;
demand, in accordance with Article 17 GDPR, erasure of personal data we have stored concerning you, unless processing of them is required for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims; demand, in accordance with Article 18 GDPR, restriction of processing of your personal data, if you dispute the correctness of the data, processing of them is unlawful, but you oppose their erasure and we no longer need the data, but you need them to establish, exercise or defend legal claims, or you have objected to processing of your data in accordance with Article 21 GDPR;
receive the personal data you have provided, in a structured, commonly used and machine-readable format, or demand that your data be transmitted to another controller in accordance with Article 20 GDPR;
revoke your consent to processing of your data at any time in accordance with Article 7 (3) GDPR. As a consequence, we will no longer be allowed to continue processing the data on the basis of this prior consent with future effect; and
Lodge a complaint with a supervisory authority in accordance with Article 77 GDPR. You can usually do so with the supervisory authority responsible for your habitual residence, place of work or the location of our company’s registered offices.
7. Right to object
If your personal data are processed to safeguard legitimate interests in accordance with Article 6 (1) sentence 1 (f) GDPR, you have the right under Article 21 GDPR to object to processing of your personal data if there are grounds relating to your particular situation or the objection is to direct marketing. In the latter case, you have a general right to object and we will comply with that right without any need for you to specify grounds relating to your particular situation.
If you wish to make use of your right to object to processing, simply send an e-mail to contact@kedlow.com.
8. Data Security
All the data you personally transfer will be sent in encrypted form using the customary and secure TLS (Transport Layer Security) standard. TLS is a secure and proven standard which is also used for online banking, for example. You can recognise a secure TLS connection inter alia by the “s” appended to http (i.e. https://..) in the address bar of your browser or by the padlock icon at the bottom of your browser. We also use appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, complete or partial loss and destruction, or access by unauthorised third parties. Our security measures are constantly improved to reflect technological advances.
9. Up-to-dateness of and amendments to this Privacy Policy
This Privacy Policy is currently valid in its version dated 1 march 2024.