The responsible entity within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:

KL Bikes GmbH, Höhenstrasse 26, 9320 Arbon

VAT ID No.: CH252.363.037

Telephone: +41 76 434 28 92

Email: info@klbikes.ch

Personal data is any information relating to an identified or identifiable natural person. A data subject is a person whose personal data is processed. Processing includes any handling of personal data, regardless of the means and procedures used, in particular the retention, disclosure, collection, erasure, storage, alteration, destruction, and use of personal data.

We process personal data in accordance with Swiss data protection law. Furthermore, to the extent that the EU GDPR is applicable, we process personal data on the following legal bases in connection with Article 6(1) GDPR:

1. (a) Processing of personal data with the consent of the data subject.

2. (b) Processing of personal data for the performance of a contract with the data subject and for taking steps at the request of the data subject prior to entering into a contract.

3. (c) Processing of personal data for compliance with a legal obligation to which we are subject under applicable EU law or the law of a country in which the GDPR is applicable in whole or in part.

4. lit. d) Processing of personal data to protect the vital interests of the data subject or another natural person.

5. lit. f) Processing of personal data to safeguard our legitimate interests or those of third parties, unless the fundamental freedoms and rights and interests of the data subject override those interests. Legitimate interests include, in particular, our business interest in being able to provide our website, information security, the enforcement of our own legal claims, and compliance with Swiss law.

We process personal data for the duration necessary for the respective purpose(s). Where longer retention periods are required due to legal or other obligations to which we are subject, we restrict processing accordingly.

If you send us inquiries via the contact form, your information from the inquiry form, including the contact details you provided,

will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We will not share this data without your consent.

We process our customers’ data in accordance with the data protection regulations of the Swiss Confederation (Data Protection Act, DSG) and the EU GDPR, as part of the ordering processes in our online shop, in order to enable customers to select and order the chosen products and services, as well as to pay for them and have them delivered or carried out.

​

The data processed includes master data/basic data, communication data, contract data and payment data. The persons affected by the processing include our customers, interested parties and other business partners. The processing is carried out for the purpose of providing contractual services within the operation of an online shop, invoicing, delivery and customer service. In this context, we use session cookies, for example to store the contents of the shopping cart, and permanent cookies, for example to store the login status.

​

The processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR (execution of ordering processes) and lit. c GDPR (legally required archiving). The information marked as required is necessary for establishing and fulfilling the contract. We disclose the data to third parties only within the scope of delivery, payment, or within the framework of legal permissions and obligations. The data is processed in third countries only if this is necessary for the fulfilment of the contract, for example at the customer’s request for delivery or payment.

​

Users may optionally create a user account, through which they can, in particular, view their orders. During registration, users are informed of the required mandatory information. User accounts are not public and cannot be indexed by search engines such as Google. If users terminate their user account, their data relating to the user account will be deleted, unless retention is required for commercial or tax law reasons in accordance with Art. 6 para. 1 lit. c GDPR. Information in the customer account remains stored until deletion, followed by archiving in the case of a legal obligation. It is the users’ responsibility to back up their data before the end of the contract if they terminate their account.

​

As part of registration and repeated logins, as well as the use of our online services, we store the IP address and the time of the respective user action. This storage is carried out on the basis of our legitimate interests, as well as the users’ interest in protection against misuse and other unauthorized use. This data is generally not passed on to third parties, unless it is necessary for pursuing our claims or there is a legal obligation to do so in accordance with Art. 6 para. 1 lit. c GDPR.

​

Deletion takes place after the expiry of statutory warranty and comparable obligations. The necessity of retaining the data is reviewed at irregular intervals. In the case of statutory archiving obligations, deletion takes place after their expiry.

We may amend this privacy policy at any time without prior notice.

The current version published on our website applies.

If the privacy policy is part of an agreement with you, we will inform you of any updates by email or other suitable means.

If you have any questions about data protection,

please send us an email or contact the person responsible for data protection in our organization,

whose contact details are listed at the beginning of the privacy policy.