Privacy Policy
This policy explains how we collect and process personal data when you visit our website or use our services.
Responsible Entity
Pink Box AG
Ibelweg 18a
6300 Zug
Switzerland
data@pinkbox.ch
General Notice
Based on Article 13 of the Swiss Federal Constitution and the data protection provisions (DSG), every person is entitled to protection of their privacy and protection against misuse of their personal data. We treat your personal data confidentially and in accordance with legal data protection regulations.
Collected Data
We mainly process the following categories of personal data:
- Basic data: Name, address, email, date of birth (Art. 31 para. 2 lit. a DSG)
- Contract data: Orders, subscriptions, payments (Art. 31 para. 2 lit. a DSG)
- Usage data: IP address, cookies, server data, log files (Art. 31 para. 1 DSG)
- Beauty profile / Beauty test: voluntary data such as skin type, hair structure, or preferences (Art. 31 para. 1 DSG)
Purpose of Data Processing
The processing is carried out to fulfill contracts (Art. 31 para. 2 lit. a DSG), to comply with legal obligations (Art. 31 para. 2 lit. c DSG), and to optimize our services and marketing (Art. 31 para. 1 DSG).
Data Disclosure and Transmission
We only disclose your personal data to third parties when required to fulfill our contractual obligations or when we are legally obliged to do so (Art. 31 para. 2 lit. a and c DSG).
- Payrexx AG (voucher sales): Privacy
- Swiss Post (shipping): Privacy
- Kreativmedia / METANET (hosting): KM Privacy / MN Privacy
- Authorities, if legally required
Data Transmission to Third Countries (e.g. USA)
When using tools like Google, Meta Pixel, TikTok, Pinterest, or Snapchat, data may be transferred to countries without adequate data protection, especially the USA. The providers ensure protection of this data through Standard Contractual Clauses (SCCs) according to Art. 16 DSG, which are part of their respective terms of use.
Data Security
We use technical and organizational security measures in accordance with Art. 8 DSG. Your data is encrypted (SSL) and stored on Swiss servers by our hosting partner Kreativmedia.
Cookies and Tracking Technologies
We use cookies to improve user experience. We also use fingerprinting for anonymized visitor analysis. You can deactivate cookies in your browser at any time.
Used Tools and Platforms
Meta Pixel (Facebook & Instagram)
- Provider: Meta Platforms Ireland Ltd.
- Data transfer: USA (SCCs)
- Purpose: Retargeting, conversion tracking
- Legal basis: Consent (Art. 31 para. 1 DSG)
- Opt-out: link
- Meta Privacy Policy
Google (Youtube & Analytics)
- Provider: Google Ireland Ltd.
- Data transfer: USA (SCCs)
- Purpose: Web analytics, performance
- Legal basis: Legitimate interest / consent (Art. 31 para. 1 DSG)
- Opt-out: link
- Google Privacy Policy
TikTok Pixel
- Provider: TikTok Technology Ltd.
- Data transfer: USA and others (SCCs)
- Purpose: Conversion tracking, audiences
- Legal basis: Consent (Art. 31 para. 1 DSG)
- Opt-out: via TikTok app or browser settings
- TikTok Privacy Policy
Pinterest Tag
- Provider: Pinterest Europe Ltd.
- Data transfer: USA (SCCs)
- Purpose: Advertising, conversion tracking
- Legal basis: Consent (Art. 31 para. 1 DSG)
- Opt-out: link
- Pinterest Privacy Policy
Snapchat Pixel
- Provider: Snap Inc.
- Data transfer: USA
- Purpose: Conversion tracking, retargeting
- Legal basis: Consent (Art. 31 para. 1 DSG)
- Opt-out: via device settings or Snapchat Ads Preferences
- Snapchat Privacy Policy
Data Retention Duration
We store your personal data only as long as necessary to fulfill the purposes mentioned above or as required by law (Art. 6 DSG). We delete your personal data upon request (if legally permissible) or when no longer needed.
Your Rights
You have the following rights under Art. 25–27 DSG:
- Access to your stored data
- Correction of incorrect or incomplete data
- Deletion (if no retention obligation exists)
- Restriction of processing
- Objection to certain processing
- Data transfer (data portability)
Please contact us with proof of identity at data@pinkbox.ch to exercise your rights.
Changes
We reserve the right to change this privacy policy at any time. The current version published on our website applies.
Last updated: August 1, 2025