Website privacy statement and cookie policy

Felika Sàrl (hereinafter referred to as “Felika Sàrl” or “we”) commits to processing all personal data (hereinafter referred to as “personal data”) entered via the online portal www.felikacosmetics.com (hereinafter referred to as “portal” or “website”) in accordance with current data protection legislation and to take appropriate security measures to protect it from unauthorized access. In this statement, we provide you with information about the personal data that is collected and processed as part of the use of the portal, the purposes for which it is used, the parties to whom it may be disclosed, and your rights when Felika Sàrl uses your personal data. Personal data includes all information related to an identified or identifiable natural person, e.g., names, first names, addresses, email, date of birth, or telephone number.

This privacy statement is an integral part of the general terms and conditions of sale of Felika Sàrl.

By accessing the portal and using the services and products we offer, you acknowledge that you have carefully read this statement and agree to the data processing described herein. Any questions related to this data protection statement can be addressed at any time by email to info@felika.ch. If you do not agree with this statement, you must refrain from accessing the portal and using our services and products.

Content

1. The person responsible for your personal data
2. How we process your personal data
3. The personal data we collect and the purpose of their processing
4. The legal bases on which we process your personal data
5. The parties to whom we transmit your personal data
6. Transmission of personal data to countries outside the EEA
7. How long we retain the personal data concerning you
8. Cookies, Google services
9. Social media plugins
10. Email communications and newsletter for advertising purposes
11. No automated decisions with legal effect, including profiling
12. Security
13. Privacy statement of external service providers
14. Children
15. Your rights
16. Changes made to our privacy statement

Due to the detailed approach of this document, certain content points are subdivided into different appendices, each of which relates to the heading given in the “Content” section.

1. The person responsible for your personal data

The data controller for personal data, within the meaning of data protection legislation, is Felika Sàrl, Chemin Neuf 3, CH-1955 Chamoson, +41 27 322 88 55, email: info@felika.ch.

Felika Sàrl determines the purposes and means of processing your personal data and is therefore responsible for the processing and use of your personal data in accordance with this privacy statement. If you have any questions or concerns about the statement or the processing of your personal data, do not hesitate to contact us at any time by sending an email to info@felika.ch.

2. How we process your personal data

All personal data collected via the website are processed in compliance with applicable data protection laws. We collect and process personal data carefully and for the purposes described in this privacy statement. According to the current legislation, we may also use your personal data in a manner different from that described in this statement. In such cases, we will provide specific explanations or data protection notices at the time of collection, and where appropriate, seek your consent. We always strive, where reasonable, to collect anonymized or pseudonymized information to prevent identification.

3. The personal data we collect and the purpose of their processing

3.1 Personal data automatically transmitted through the use of the portal

Felika Sàrl collects and records information that your browser automatically transmits to us in “server log files” when you visit our website. Data collection is based on your willingness and interest in visiting our website and our legitimate interests in operating the website. This may include the following data:

• Type and version of the browser
• Operating systems used
• Referrer URL (the previously visited page)
• Host name of the computer accessing the site
• Date and time of the server request
• Internet protocol address (IP address)
• Amount of data transmitted
• Other similar data and information used to prevent risks in the event of attacks on our computer systems

These personal data are not cross-referenced with other data of the same type and are stored separately from other personal data possibly transmitted by the user. We delete them no later than twelve months after collection.

Felika Sàrl uses the personal data collected automatically to fulfill the following purposes:

• Enable the display, operation, and proper functioning of the portal
• Ensure system stability and security
• Protect and improve our services
• For statistical purposes, in case of attacks on the network infrastructure on which the website is made available

3.2 Personal data transmitted by the user

Felika Sàrl collects and processes personal data that the user voluntarily transmits to Felika Sàrl through an online form on the portal, via our contact email address, through possible other applications linked to the portal, by phone or otherwise. These include, for example, the following personal data:

• Name(s), first name(s), postal address, email address, phone number, date of birth, gender
• Your message or request

Providing these personal data is expressly voluntary. However, without these data, we will not be able to provide the requested services to the user in the desired quality, or possibly at all.

Felika Sàrl uses the personal data transmitted by the user to fulfill the following objectives:

• Provide, maintain, protect, and optimize the services and information offered
• Communicate with you and provide you with the most personalized information possible (for example, about our products and services)
• Offer you new services and information and, based on your profile, personalized services and information that may be of interest to you
• Comply with legal requirements, other regulatory requirements, and internal rules
• Establish, exercise, and/or defend real or potential rights, whether in the context of investigations or similar procedures
• For other legitimate purposes, if such processing arises from the circumstances or has been indicated at the time of collection

4. The legal bases on which we process your personal data

The processing of the aforementioned data is based on the following legal grounds:

• Your consent, only if it can be revoked at any time (for example, when you subscribe to our newsletter and other marketing communications),
• For the performance of a contract with you or in order to conclude a contract with you (for example, when purchasing a product),
• To comply with a legal obligation (for example, for tax reasons or for the purposes of an investigation or judicial procedure); or
• To protect our legitimate interests (for example, the protection and security of our services, systems, assets; compliance with legal, regulatory, and contractual obligations; the
• establishment, exercise, or defense of legal rights; the efficient maintenance and organization of business activities; the improvement and development of our services as well as the sale and marketing of them).

If the processing is based on your consent or on our legitimate interests, you can revoke your consent or object to this processing at any time by contacting us directly at info@felika.ch. Please note, however, that revoking your consent does not affect the legality of processing based on consent before its revocation.

5. The parties to whom we transmit your personal data

Felika Sàrl takes necessary measures to ensure that only our authorized personnel and our assistants, who have the necessary knowledge, have access to your personal data in order to achieve the purposes for which they were collected.

We may transmit your personal data to the possible categories of recipients following, in accordance with the purposes and legal bases of processing described above, to the extent necessary for the intended data processing:

• Other companies in the group
• Service providers who process personal data on mandate and on instruction from Felika Sàrl (so-called processors, for example, in the field of IT, hosting, and support)
• Clients, partners, suppliers, insurers, and other business partners
• Press agencies, the public, including visitors to the websites and social media of the group
• Sector organizations, associations, and other bodies
• Acquirers or parties interested in acquiring business units, companies, or other parts of the group
• Courts, conciliation bodies, law enforcement agencies, supervisory authorities, lawyers, and other parties in potential or actual legal proceedings, when necessary to comply with thelaw or to establish, exercise, or defend legal rights or claims

We carefully select our partners and subcontractors only if we have the guarantee that they have the technical and organizational measures appropriate, in accordance with legal requirements. Our subcontractors may process personal data only on documented instruction from us. They are all subject to confidentiality obligations and may use your personal data only to the extent necessary to achieve the purpose for which your personal data were collected, unless otherwise provided by law.

6. Transmission of personal data to countries outside the EEA

Personal data collected via our website are stored in Switzerland. Additionally, we may transfer, store, and process your personal data at data sites around the world, for example where our third-party suppliers or partners are located. We may therefore transfer your personal data outside the European Economic Area (EEA) if necessary for the data processing described in this data protection statement, in accordance with current legislation.

When data is transferred to countries that do not ensure an adequate level of protection, we ensure that data protection is adequate by taking appropriate guarantees, such as certain contractual guarantees (for example, based on EU standard clauses), based on binding corporate rules, data transfer according to your explicit consent, for the conclusion or performance of a contract with you or in the context of the establishment, exercise, or defense of legal rights. For more information on our appropriate security measures, please contact us by email at info@felika.ch.

7. How long we retain the personal data concerning you

In principle, personal data are deleted as soon as they are no longer necessary for achieving the purpose for which they were collected, unless longer retention is necessary to fulfill legal obligations (e.g., retention and documentation obligations), contractual or pre-contractual obligations, or legitimate commercial interests on our part (e.g., to assert, exercise, or defend legal rights).

On this basis, we generally process personal data in compliance with the following rules and obligations:

• Personal data that you automatically transmit by using our portal (see point 3.1) for the purpose of display, operation, and guaranteeing the proper functioning of the portal are deleted within twelve months;
• Personal data that you have transmitted to us in the context of using our services and products offered on our portal or that you have communicated to us in another way via the contact email address (see point 3.2) are generally kept with us until you ask us to delete them, revoke your consent to their storage, or the purpose of their storage becomes obsolete (e.g., after processing your request);
• For personal data related to a contract (including business documents and communications), we retain personal data as long as the contractual relationship exists, then for an additional ten years once the contractual relationship has ended, unless (i) a legal obligation of shorter or longer retention applies in a particular case, (ii) retention is necessary for evidence reasons or for another valid reason according to applicable law, or (iii) deletion of data is necessary earlier (for example, because the data is no longer necessary or we must delete the corresponding data).

8. Cookies and Google Services

When you access the site or use it, we may place “cookies” – small text files – or similar tools on your computer. We use these cookies to recognize you as a site user, to customize the content, to improve the performance of the site, and to make it more user-friendly.

a) Categories of cookies we use

Depending on their function and use, the cookies we use can be classified into the following categories: functional cookies, performance cookies, and advertising cookies.

• Functional cookies: these cookies serve many purposes for the presentation, functionality, and performance of a website and, in particular, to improve the experience and enjoyment of visitors to the site. They allow a website to remember information already provided (for example, username, location, or language choice) and offer visitors enhanced and more personal features. Functional cookies are, for example, used to remember items such as your login data. These cookies cannot track your movements on other websites.
• Performance cookies: these cookies are used to collect information about how a website is used – for example, how visitors arrived at our website, which pages a visitor opens most often, how you navigated our website during your visit, and whether you receive error messages from a page. We may also use these cookies to provide us with certain statistical and analytical information, for example, the number of visitors who came to our site. These cookies are used to monitor the site’s activity level and improve its performance.
• Advertising cookies (sometimes called “targeting cookies”): these allow us, or a third-party provider, to serve ads on our website or on third-party websites featuring products that the user likes, so that the advertising the user sees can be more relevant to their preferences or interests. They can also be used to evaluate the effectiveness of advertisements and commercial promotions.

These cookies may be placed by us or by a third party on our behalf. For more information about cookies and their use, visit the website: www.allaboutcookies.org/.

The legal basis for data processing results from your consent (Article 6, para. 1, let. a GDPR) or our legitimate interest (Article 6, para. 1, let. f GDPR).

You can configure your browser settings so that no cookies are stored on your computer. Completely disabling cookies may prevent you from using all the features of our site.

By continuing to use our website and/or accepting this data protection statement, you consent to our installation of cookies and to the collection, storage, and use of personal usage data, even after the end of the browsing session. You can revoke this consent at any time by activating your browser preferences to refuse cookies from third-party providers.

b) Google Analytics

Felika Sàrl uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, on its website. The cookies used by Google Analytics are stored on your computer and thus enable an analysis of your use of the website.

The use of Google Analytics reflects our legitimate interests in analyzing and regularly improving our website as well as constantly improving our offer thanks to the statistics thus obtained and making it more interesting for you. Moreover, the use of Google Analytics requires your consent regarding tracking (tracking). It similarly requires consent concerning your browsing behavior on our web pages and the analysis resulting from it.

The information generated by the cookie about your use of this website is generally transferred to a Google server in the United States and stored there. These cookies may contain, for example, the following information: IP address, number, date and time of the visit, duration of the visit, access page from which you use the website (referral URL), the pages visited on our website, the type/version of the browser as well as the operating system used. Google uses this information on our behalf, as we have a legitimate interest in analyzing user behavior to optimize the offer on our website and our advertising. Google uses this information to evaluate the use of our website, to compile reports on website activities, and to provide us with other services related to the use of the website and the Internet. Similarly, pseudonymized user profiles can be created from the processed personal data.

On this website, we have enabled the IP Anonymization function (called IP masking). Please apply it correctly. Thus, your IP address is shortened by Google in the member states of the European Union, in other signatory states of the agreement on the European Economic Area, and in Switzerland before being transmitted to the United States. Only in exceptional cases is the full IP address transmitted to a Google server in the United States and shortened there.

You can prevent the storage of cookies by configuring your browser software accordingly. However, we draw your attention to the fact that, in this case, it is possible that you may not be
able to use all the functions of this website in their entirety. You can also prevent Google from collecting the personal data generated by the cookie and relating to the use of the website (including your IP address) as well as the processing of this personal data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de. Alternatively, or concerning browsers of mobile devices, you can prevent the collection of your personal data by Google Analytics by clicking on the following link: disable the collection of personal data by Google Analytics for this website. In this case, a special opt-out cookie will be installed on your device, which will prevent the future collection of your personal usage data when you visit this website. If you delete the stored cookies, you must click on this link again. For more information on the processing of users’ personal data by Google Analytics, please see Google’s privacy statement: https://support.google.com/analytics/answer/6004245?hl=de.

Moreover, it is possible that Google verifies the use of the website by the user and possibly combines the collected personal data with other information about the user that Google has collected independently from other websites visited by the user and that Google uses this information for its own purposes (e.g., to control advertising), under its own responsibility and based on its own privacy statement. For more information on this and how Google processes personal data, please consult Google’s privacy statements at: https://policies.google.com/?hl=de; https://policies.google.com/technologies/partner-sites.

c) Google Maps

This website uses the Google Maps API offering, a mapping service from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. This allows us to display interactive maps directly on the website and thus enables you to use the map made available comfortably.

The legal basis for processing this data results from your consent and the information you have provided for route planning. Indeed, it is in our legitimate interest to present our site and thus make it easy to find the location we have indicated.

By using Google Maps, information about the use of our website, including your IP address, may be transmitted to a Google server in the United States and stored there. Google may transmit the information obtained through Google Maps to third parties if required by law or if third parties process this data on behalf of Google.

Google will never associate your IP address with other data it holds. Nevertheless, it would be technically possible for Google to identify at least some users based on the data received. It is also possible that Google may process personal data and personality profiles of website users for other purposes, over which we have and can have no influence.

It is possible to disable Google Maps and prevent data transmission to Google by disabling JavaScript in your browser. However, we draw your attention to the fact that, in this case, you will not be able to use the display of maps.

For more information on the purpose and scope of data collection and their processing by Google, as well as your rights in this regard and settings options to protect your privacy, please
visit www.google.de/intl/de/policies/privacy.

d) List of cookies

You can find a complete list of the cookies we use or will use on this site, including information on their use and expiration, under this link.

9. Social Media Plugins

We use the social plugins listed below on our website to make our company known. The underlying advertising purpose must be considered a legitimate interest within the meaning of Article 6, para. 1, let. f GDPR. The responsibility for data protection-compliant operation must be guaranteed by their respective providers. Data processing in connection with these plugins is carried out with your consent when you use them.

If you use the services of these social networks independently or in connection with our website, the social networks evaluate your use of the plugin. In this case, certain information regarding the plugin is transmitted to the social networks.

a) Facebook

Our website uses plugins from the social network Facebook, provided by Meta Platforms, Inc., 1601 Willow Road Menlo Park, CA 94025, USA. Facebook plugins are marked with a Facebook logo or the mention “Like” or “Share”. You can find an overview of Facebook plugins and their appearance at: https://developers.facebook.com/docs/plugins.

When you visit a page of our website that contains such a plugin, your browser establishes a direct connection with Facebook’s servers. The content of the plugin is transmitted directly by
Facebook to your browser and integrated into the page. As a result of this integration, Facebook receives the information that your browser has visited the corresponding page of our website, even if you do not have a Facebook profile or are not logged into Facebook at that time. This information (including your IP address) is transmitted directly from your browser to a server of Facebook in the United States and stored there.

If you are logged into Facebook, Facebook can directly attribute the visit to our website to your Facebook profile. If you interact with the plugins, for example by clicking the “Like” button, this information is also transmitted directly to a Facebook server and stored there. The information is also published on your Facebook profile and displayed to your Facebook friends.

To learn about the purpose and scope of data collection, further processing and use of the data by Facebook, as well as your rights in this matter and settings options to protect your privacy, please consult Facebook’s privacy policy: www.facebook.com/policy.php.

b) Instagram

Our site uses the plugin of the social network Instagram, provided by Meta Platforms, Inc, 1601 Willow Road Menlo Park, CA 94025, USA.

Data is only sent to the social media provider when the user activates the social media plugins by clicking on the selected plugin. Thus, the user can choose the precise moment when they wish to activate them. In this case, Facebook can establish a direct connection with the user during their visit to the website, which allows Facebook to become aware of the user’s visit and analyze the corresponding information. The subsequent processing of personal data is carried out under the responsibility of Facebook, in accordance with data protection laws and the privacy policy published on its website: https://help.instagram.com/519522125107875/?helpref=hc_fnav&bc[0]=Instagram-Hilfebereich&bc[1]=Richtlinien%20und%20Meldungen. Please read the privacy statements of your social networks carefully for detailed information on the collection and transfer of personal data, your rights, and how you can benefit from satisfactory
privacy settings.

c) LinkedIn

Plugins from the social network LinkedIn Corporation, 1000 West Maude Avenue Sunnyvale, California 94085, USA, are also installed on our website. The LinkedIn plugin (button “LinkedIn
Recommended”) is recognizable by the LinkedIn logo. When you visit a page of our website that contains such a plugin, a direct connection is established between your browser and the LinkedIn server. LinkedIn thus receives the information that you have visited our site with your IP address. If you click on the LinkedIn button while you are logged into your LinkedIn account, you can link the content of our pages to your LinkedIn profile. LinkedIn can thus associate the visit to our pages with your user account. We draw your attention to the fact that as the provider of the pages, we are not aware of the content of the transmitted data nor of their use by LinkedIn. You can find more information at: www.linkedin.com/legal/privacy-policy.

10. Email communications and newsletter for advertising purposes

When you subscribe to our newsletter, we use your email address to send you information about our services as well as other commercial communications (e.g., announcements of events, contests, promotions, and surveys) that may be of interest to you. You can unsubscribe from the newsletter at any time by clicking on the “Unsubscribe from this list” link appearing at the end of each email or by contacting us directly at the email address info@felika.ch.

11. No automated decisions with legal effect, including profiling

We do not make any decisions about you that are based solely on automated processing, including profiling, that have legal effects concerning you or similarly significantly affect you.

12. Security

Felika Sàrl has implemented organizational and technical measures to preserve the security of ersonal data and protect them against unauthorized or unlawful processing, any accidental loss, any alteration, any disclosure, or any unauthorized access.

Felika Sàrl may use third parties as data processors to collect and process your personal data. The data processing companies we have mandated will process your personal data only in accordance with our instructions and are required by law to take strict security measures when processing personal data.

Unfortunately, the transmission of information via the internet is not completely secure. Although we do our utmost to protect your personal data, we cannot guarantee the security of the data you transmit to our website; each transmission is at your own risk. That is why you are always free to transmit your personal data to us by other means, for example, by phone. Once we have received your data, we apply strict procedures and rigorous security measures to prevent any unauthorized access.

13. Privacy statement of external service providers

Please note that if you click on the link to a third-party site (for example, Google or social media or other sites), you will be redirected to a site that we do not control and our privacy statement will no longer apply. Your browsing and interaction on another website are subject to the terms of use and privacy statements and notices of these third-party websites. In addition, we cannot guarantee the accuracy and timeliness of the links provided on such sites.

We recommend that you read the terms of use and privacy statements and notices related to data protection of other websites carefully before transmitting personal data via this website. We are not responsible for the content of the information and data processing of these third-party sites.

14. Children

Our website is not intended for children, and we do not knowingly collect personal data from children under 18 years of age. If we are informed or learn in another way that personal data from a child under 18 years of age have been collected inappropriately, we will take all reasonable steps to delete such personal data.

15. Your rights

You have the right to ask Felika Sàrl to indicate whether personal data concerning you are being processed. In addition, you have the right to request the correction, deletion, or limitation of the personal data concerning you, as well as to object to the processing of your personal data. If the processing is based on your consent or our legitimate interests, you can revoke your consent or object to this processing at any time by contacting us directly by email at info@felika.ch. In some cases, you have the right to receive your personal data generated during the use of online services in a structured, commonly used, and machine-readable format so that further use and transmission to a possible third-party provider are possible.

Requests in this regard must be addressed to Felika Sàrl at the following email address: info@felika.ch. Felika Sàrl reserves the right to limit your rights within the framework of current legislation and, for example, not to disclose complete information or to delete certain personal data.

If we refuse your request or if you are not satisfied with our processing, you also have the right to file a complaint with the competent supervisory authority and to introduce a remedy with it. For users based in Switzerland, the competent authority is the Federal Data Protection and Information Commissioner (FDPIC) (www.edoeb.admin.ch). For users residing in EU countries, a list of supervisory authorities is available at https://ec.europa.eu/newsroom/article29/item-detail.cfm?item_id=612080.

16. Changes made to our privacy statement

Felika Sàrl reserves the right to adapt, supplement, or otherwise modify this statement on the protection of personal data at any time and without giving reasons. The applicable privacy statement is the one published on our portal.

Valid from March 1, 2024