Privacy Policy

1. THE SECURITY OF USER DATA IS A TOP PRIORITY

VALL'DOAIDO respects the privacy of all users of the website and online shop (hereinafter referred to as "the customer" or "the customers"). This privacy policy forms the basis for the processing of personal data and informs about the type of data collected by VALL'DOAIDO, how VALL'DOAIDO uses this data, and the rights available to customers. VALL'DOAIDO complies with applicable data protection laws – in particular, the Swiss Federal Act on Data Protection (FADP) as revised on September 1, 2023 – and processes personal data solely for the purposes for which it was transmitted.

These privacy terms are periodically adjusted, supplemented, or amended.The current version applies with each new visit to the website and can be viewed at any time.

In the event of any conflicts between this Privacy Policy and other applicable contractual or business terms of VALL'DOAIDO, the provisions of this Privacy Policy shall prevail.

2. TYPE AND PURPOSE OF DATA COLLECTED

The term "personal data" or "personal information" as used in this Privacy Policy includes all information relating to an identified or identifiable natural person. Processing of personal data refers to any handling of personal data, such as collecting, using, storing, disclosing, transmitting, or deleting data.

On one hand, VALL'DOAIDO automatically collects personal data when the customer interacts with the website or uses the online shop. On the other hand, personal data is collected when a customer provides it (e.g., when contacting us, creating a user profile, or a customer account).

2.1 Automatically Collected Data

When visiting the VALL'DOAIDO website, statistical data about the areas of the web offering visited by the customer is automatically collected.Each time the website is accessed, the web server automatically stores the so-called server log file, which contains, for example, the name of the requested file, the customer's IP address, date and time of access, the browser used, the operating system, the amount of data transferred, and the requesting provider (access data), and logs the access. In this context, so-called cookies (see section 4) are partially used.

These access data are evaluated exclusively for the purpose of ensuring the smooth operation of the website and improving our services.

2.2 Data when interacting with VALL'DOAIDO, for contract processing, contacting, and opening a customer account

Personal data such as name, address, phone number, or email address is collected from customers when they provide it as part of an order or when contacting VALL'DOAIDO (e.g., via a contact form or email). Mandatory fields are marked as such because VALL'DOAIDO needs the data in these cases for contract processing or handling the contact request, and the order or contact request cannot be submitted without this information. The data collected is evident from the respective input forms.

If a customer decides to open a customer account, VALL'DOAIDO uses the personal data for the purpose of opening the customer account.The mandatory information requested during registration must be provided in full; otherwise, VALL'DOAIDO may reject the registration. VALL'DOAIDO uses the collected personal data exclusively for the use of the online shop or the respective offer or service for which the customer has registered. Additionally, VALL'DOAIDO may use the customer's email address to inform them about important changes, such as in the scope of the offer or technically necessary adjustments.

After the complete processing of the contract or after the deletion of the customer account, the customer's data will be blocked for further processing and deleted after the expiration of the tax and commercial law retention periods, unless the customer has expressly consented to further use of the data or VALL'DOAIDO reserves the right to further legally permitted data use.Deletion of the customer account is possible at any time and can be done by sending a message to the contact details mentioned below (see section 9) or through a designated function in the customer account.

3. LEGAL BASIS FOR THE COLLECTION AND PROCESSING OF PERSONAL DATA

The legal basis for the collection and processing of the customer's personal data depends on the specific purpose of the data processing.In particular, the following principles are considered:

• the protection of legitimate interests of VALL'DOAIDO, provided that the interests of the customer or their fundamental rights and freedoms do not prevail;
• the conclusion or fulfillment of a contract;
• legal retention or notification obligations;
• the customer's consent at the time of collection of personal data. The customer can revoke their consent at any time with effect for the future. To do so, the customer can send a corresponding message to the contact details mentioned below. The legality of the data processing carried out until the revocation is not affected by the revocation.

4. USE OF COOKIES AND DATA USAGE

4.1 Cookies

To continuously improve the website for customers, VALL'DOAIDO may use cookies. Cookies are small software information stored by web browsers (e.g., Google Chrome, Safari, Microsoft Edge, or Mozilla Firefox) on the customer's device to facilitate website use (e.g., language selection, shopping cart, etc.).

Some of the cookies used by VALL'DOAIDO are deleted after the browser session ends (so-called session cookies). Other cookies remain on the device and allow VALL'DOAIDO to recognize the customer's browser on their next visit (so-called persistent cookies). The storage duration can be found in the cookie settings overview of the web browser.

Most web browsers automatically accept these cookies; however, they can be configured not to accept or store cookies. If cookies are disabled, the functionality of the website may be limited. Further information can be found in the user manual or help function of the web browser.

4.2 Data Usage

The data collected when accessing the VALL'DOAIDO website via cookies can be used for web analysis, website optimization, and performance evaluation. VALL'DOAIDO may engage third-party providers who have their own privacy policies, over which VALL'DOAIDO has no control.

VALL'DOAIDO utilizes features from the following services:

Google Analytics

The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, or for users outside the European Economic Area, Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google analyzes the use of the website to create reports on website activities and provide VALL'DOAIDO with other services related to website and internet usage.

Insofar as the information is transferred to Google's servers in the USA, this is done based on the Swiss-U.S. Data Privacy Framework (DPF), in which Google participates, as well as on the basis of appropriate safeguards such as EU standard contractual clauses.

Further information can be found in Google's Privacy Policy at https://policies.google.com/privacy.

Google Ads and Google Conversion Tracking

The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

As part of Google Ads, VALL'DOAIDO uses what is known as conversion tracking. When a customer clicks on an ad placed by Google, a cookie is set for conversion tracking. These cookies expire after a maximum of 30 days and are not used for personal identification of the customer.If the customer visits the VALL'DOAIDO website and the cookie has not yet expired, Google and VALL'DOAIDO can recognize that the customer clicked on the ad and was redirected to this page.

VALL'DOAIDO receives from Google the total number of users who clicked on the ad and were redirected to a page tagged with a conversion tracking tag. However, VALL'DOAIDO does not receive any information that could personally identify the customer.

Further information can be found in Google's privacy policy at https://policies.google.com/privacy.

Google Maps

Provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

VALL'DOAIDO uses Google Maps for the visual representation of geographic information. When using Google Maps, Google processes data about the use of the Maps functions by website visitors, which may include the IP address and location data. VALL'DOAIDO has no influence on this data processing. If information is transferred to the USA, the guarantees described above under "Google Analytics" apply (Swiss-U.S. DPF or EU Standard Contractual Clauses).

To deactivate the Google Maps service and thus prevent data transmission to Google, the customer can disable the JavaScript function in their browser. In this case, Google Maps can only be used to a limited extent or not at all.

Further information can be found in Google's privacy policy at https://policies.google.com/privacy.

4.3 Content from Social Networks

VALL'DOAIDO may use social network plug-ins like Facebook, Instagram, LinkedIn, or X (formerly Twitter) on the website.

When the customer accesses a website containing such a plug-in, the web browser establishes a direct connection to the servers of the respective social network. The content of the plug-in is transmitted directly from the provider to the web browser and integrated into the page.By integrating the plug-ins, the providers receive the information that the customer's browser has accessed the corresponding VALL'DOAIDO website, even if the customer does not have a profile on the respective social network or is not currently logged in. This information (including the IP address) is transmitted directly from the customer's browser to a server of the respective provider (possibly also in the USA) and stored there. If the customer is logged into one of the services, the social network providers can directly associate the visit to the VALL'DOAIDO website with the profile on the respective social network. If the customer interacts with the plug-ins, for example by clicking the "Like" or "Share" button, the corresponding information is also transmitted directly to a server of the providers and stored there.The information will also be published on the social network and displayed to the customer's contacts.

These social network platforms have their own privacy policies, over which VALL'DOAIDO has no control.

The purpose and scope of data collection, as well as the further processing and use of the data by the providers, including contact options and the related rights of customers and settings for privacy protection, can be found in the providers' data protection notices:

• https://www.facebook.com/policy.php
• https://help.instagram.com/155833707900388
• https://x.com/de/privacy
• https://linkedin.com/legal/privacy-policy

If the customer does not want these plug-ins to be loaded, it is recommended to log out of the respective social networks. Additionally, various browsers can be configured or supplemented with add-ons to prevent the social network plug-ins from being loaded.

4.4 Product Reviews (Judge.me)

VALL'DOAIDO uses the service Judge.me for collecting, managing, and displaying product and shop reviews. The provider is Judge.me Ltd, Buckworths, 2nd Floor, 1–3 Worship Street, London EC2A 2AB, United Kingdom (Company Registration Number 12157706).

Judge.me processes personal data on behalf of VALL'DOAIDO as a data processor (sub-processor). The responsibility for this data processing remains with VALL'DOAIDO.

After completing an order, Judge.me can send an email on behalf of VALL'DOAIDO to the address provided by the customer, inviting them to leave a review. For this purpose, the email address, name, and details of the order placed are transmitted to Judge.me.

When a customer submits a review, Judge.me processes the data entered in the review form – specifically the provided name or initials, the review itself (star rating and text), as well as any photos or videos uploaded by the customer. These reviews are publicly displayed on the VALL'DOAIDO website and potentially on the Judge.me platform. The customer decides which personal data is published in a review and can change or delete a submitted review at any time through their user profile at Judge.me.

Certain content and data may also be transmitted by Judge.me to the operator of the e-commerce platform (Shopify).

The processing of data for sending the review request is based on VALL'DOAIDO's legitimate interests in customer feedback and improving the offering, or on the customer's consent.If data is transmitted abroad – particularly to the United Kingdom – or processed there, this is done in compliance with appropriate guarantees to ensure adequate data protection.

Further information on data processing by Judge.me can be found in the privacy policy of Judge.me at https://judge.me/privacy.

5. NEWSLETTER

If the customer wishes to receive the newsletter offered by VALL'DOAIDO, VALL'DOAIDO requires the customer's email address and additional information to verify that the customer is the owner of the provided email address and agrees to receive the newsletter (so-called "double opt-in" procedure). If the customer wishes to subscribe to a newsletter as a registered customer, they must give their consent at the time of registration.

With the newsletter, the customer regularly receives recommendations and offers that may be of interest to them. For this purpose, VALL'DOAIDO collects and processes personal data regarding the customer's usage behavior on the website, orders placed with VALL'DOAIDO, and how the customer uses the newsletter (for example, whether the newsletter is opened or which links are clicked). VALL'DOAIDO may evaluate this data for statistical purposes to better tailor the newsletter content to the interests of the customers.

The personal data entered in the newsletter registration form is processed based on the customer's consent, which can be revoked at any time with future effect.The cancellation is done via the "Unsubscribe" link in the newsletter, by written notification from the customer to VALL'DOAIDO at the address mentioned below, or by closing the customer account. VALL'DOAIDO uses the collected personal data to design the content and send the newsletter. The data is not shared with third parties for their own (advertising) purposes.

VALL'DOAIDO retains the personal data provided by the customer for receiving the newsletter until the customer unsubscribes.

6. DISCLOSURE OF YOUR DATA

VALL'DOAIDO generally does not share customers' personal data with third parties.Exceptions exist when:

• the customer has consented to the transfer of data to companies not affiliated with VALL'DOAIDO;
• VALL'DOAIDO is required by law, regulatory order, or court decision;
• service providers are engaged to assist VALL'DOAIDO in data processing, website administration, or otherwise, as well as in providing the products and services ordered by the customer (e.g., parcel delivery services, payment service providers, or newsletter service providers).

These third parties are contractually obligated to maintain the same level of security and data protection as VALL'DOAIDO and to process the data solely within the scope of the assignment.

Disclosure of personal data abroad only occurs if adequate data protection is ensured there or suitable guarantees (e.g., standard contractual clauses, Swiss-U.S. DPF) ensure appropriate data processing.

7. DATA SECURITY

Data transmission over the Internet is not absolutely secure. VALL'DOAIDO collaborates with service providers and internet providers who implement appropriate technical and organizational security measures to protect customers' personal data. However, VALL'DOAIDO cannot fully guarantee the security of data transmitted by the customer. Therefore, any data transmission is at the customer's own risk.

8.YOUR RIGHTS

Every customer has the following rights under applicable data protection law:

• Right to information about the data processed concerning their person;
• Right to rectification of incorrect data;
• Right to deletion or destruction of data, insofar as their processing is not (or no longer) justified;
• Right to data release or transfer in a common electronic format;
• Right to revoke a given consent with effect for the future;
• Right to object to certain data processing, especially for advertising purposes.

Of course, every customer is free to inform VALL'DOAIDO at any time – for example, via email – that their personal data should no longer be used for contact purposes in the future. Participation in special services of the VALL'DOAIDO website, such as the newsletter service, can be revoked at any time.

The customer also has the right to file a complaint with the competent Federal Data Protection and Information Commissioner (EDÖB).

9.CONTACT

If a customer has questions about this privacy policy or VALL'DOAIDO's privacy practices, they can contact VALL'DOAIDO at the following address:

Vall'doAido GmbH Dürrackerstrasse 17 4625 Oberbuchsiten info@valldoaido.ch

10. FINAL PROVISIONS

If individual provisions or parts of these privacy terms are void or ineffective, the validity of the remaining privacy terms shall not be affected.

Jurisdiction and applicable law are governed by the terms and conditions of VALL'DOAIDO.

(Version 1.2 from June 15, 2026)