Data protection

Privacy Policy

1) Introduction and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data refers to all data with which you can be personally identified.

1.2 The controller for data processing on this website in terms of the Swiss Data Protection Act (DSG) is Florian Pümpin, 4323 Wallbach, Switzerland, E-Mail: support@saint-vanta.com. The controller for the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

2) Data Collection When Visiting Our Website

2.1 When using our website for informational purposes only, i.e., if you do not register or otherwise transmit information to us, we only collect data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

  • Our visited website
  • Date and time of access
  • Amount of data sent in bytes
  • Source/reference from which you came to the page
  • Browser used
  • Operating system used
  • IP address used (if applicable: in anonymized form)

No other transmission or use of the data takes place. However, we reserve the right to retrospectively check the server log files if there are concrete indications of unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser line.

3) Hosting & Content Delivery Network

3.1 GoDaddy

For hosting our website and displaying page content, we use the system of the following provider: Go Daddy Operating Co LLC, 14455 North Hayden Road Suite 226 Scottsdale, AZ 85260, USA

All data collected on our website is processed on the provider's servers. We have concluded a data processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.

3.2 Shopify

For hosting our website and displaying page content, we use the system of the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify")

Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada

All data collected on our website is processed on the provider's servers. We have concluded a data processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.

4) Cookies

To make visiting our website attractive and to enable the use of certain functions, we use cookies, which are small text files stored on your device. Some of these cookies are automatically deleted after closing the browser (so-called "session cookies"), while others remain on your device for a longer period and allow for the storage of page settings (so-called "persistent cookies"). In the latter case, you can find the storage duration in the cookie settings overview of your web browser.

If personal data is processed by individual cookies used by us, the processing takes place either for the execution of the contract, in the case of a granted consent, or to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit.

You can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or exclude the acceptance of cookies for certain cases or generally.

Please note that if cookies are not accepted, the functionality of our website may be limited.

5) Contacting Us

When you contact us (e.g., via contact form or e-mail), personal data is collected. Which data is collected in the case of a contact form is evident from the respective contact form. This data is used exclusively for the purpose of answering your request or for contacting you and the associated technical administration. Your data will be deleted after final processing of your inquiry. This is the case when it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that no legal retention obligations conflict with this.

6) Data Processing for Opening a Customer Account and for Contract Fulfillment

Personal data is collected and processed when you provide it to us for the purpose of executing a contract or when opening a customer account. Which data is collected is evident from the respective input forms. Your customer account can be deleted at any time by sending a message to our address. We store and use the data you provide for contract processing. After deletion of your customer account, your data will be blocked with regard to tax and commercial law retention periods and deleted after expiry of these periods, unless we can demonstrate an overriding interest for further processing within the meaning of Art. 31 para. 2 DSG or a legal justification.

7) Use of Your Data for Direct Marketing

7.1 Newsletter Registration

By providing your personal data, you agree that we may use this data to send newsletters.

We store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration to be able to trace a possible misuse of your e-mail address at a later date. The data collected by us during newsletter registration is used exclusively for promotional purposes via the newsletter. You can unsubscribe from the newsletter at any time via the provided link in the newsletter or by sending a corresponding message to us. After unsubscribing, your e-mail address will be immediately deleted from our newsletter distribution list, unless we can demonstrate an overriding interest for further processing within the meaning of Art. 31 para. 2 DSG or a legal justification.

7.2 Sending of E-Mail Newsletters to Existing Customers

If you have provided us with your e-mail address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services from our range, which you have already purchased, by e-mail. For this, we do not need to obtain separate consent from you. Data processing in this respect is based solely on our legitimate interest in personalized direct marketing. If you initially objected to the use of your e-mail address for this purpose, we will not send you any e-mails. You are entitled to object to the use of your e-mail address for the aforementioned advertising purpose at any time with effect for the future by notifying the controller mentioned at the beginning. For this, only transmission costs according to the basic rates will be incurred by you. After receipt of your objection, the use of your e-mail address for advertising purposes will be discontinued immediately.

7.3 GoDaddy

Our e-mail newsletters are sent via this provider: Go Daddy Operating Co LLC, 14455 North Hayden Road, Suite 226, Scottsdale, AZ 85260, USA

Based on our legitimate interest in effective and user-friendly newsletter marketing, we pass on the data you provided during newsletter registration to this provider so that they can handle the newsletter dispatch on our behalf.

Subject to your explicit consent, the provider also conducts a statistical success analysis of newsletter campaigns using web beacons or tracking pixels in the sent e-mails, which can measure open rates and specific interactions with the newsletter's content. Device information (e.g., time of access, IP address, browser type, and operating system) is also collected and evaluated but not merged with other data records.

You can revoke your consent to newsletter tracking at any time with effect for the future.

We have concluded a data processing agreement with the provider, which protects the data of our site visitors and prohibits disclosure to third parties.

7.4 Omnisend

Our e-mail newsletters are sent via this provider: Soundest Ltd., Unit a3, Gateway Tower, 32 Western Gateway, London E16 1YL, England

Based on our legitimate interest in effective and user-friendly newsletter marketing, we pass on the data you provided during newsletter registration to this provider so that they can handle the newsletter dispatch on our behalf.

Subject to your explicit consent, the provider also conducts a statistical success analysis of newsletter campaigns using web beacons or tracking pixels in the sent e-mails, which can measure open rates and specific interactions with the newsletter's content. Device information (e.g., time of access, IP address, browser type, and operating system) is also collected and evaluated, but not merged with other data records.
You can revoke your consent to newsletter tracking at any time with effect for the future.

We have concluded a data processing agreement with the provider, which protects the data of our site visitors and prohibits disclosure to third parties.

7.5 Shopify Email

Our e-mail newsletters are sent via this provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland

Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada

Based on our legitimate interest in effective and user-friendly newsletter marketing, we pass on the data you provided during newsletter registration to this provider so that they can handle the newsletter dispatch on our behalf.

Subject to your explicit consent, the provider also conducts a statistical success analysis of newsletter campaigns using web beacons or tracking pixels in the sent e-mails, which can measure open rates and specific interactions with the newsletter's content. Device information (e.g., time of access, IP address, browser type, and operating system) is also collected and evaluated, but not merged with other data records.
You can revoke your consent to newsletter tracking at any time with effect for the future.

We have concluded a data processing agreement with the provider, which protects the data of our site visitors and prohibits disclosure to third parties.

8) Data Processing for Order Fulfillment

8.1 Transmission of Image Files for Order Processing via Upload Function

On our website, we offer customers the option to commission the personalization of products by submitting image files via an upload function. The submitted image motif is used as a template for personalizing the selected product.

Via the upload form on the website, the customer can directly transmit one or more image files from the storage of the used device to us via automated, encrypted data transfer. We then collect, store, and use the transmitted files exclusively for the creation of the personalized product in accordance with the respective service description on our website. If the transmitted image files are passed on to special service providers for the production and processing of the order, you will be explicitly informed about this in the following paragraphs. No further disclosure takes place. If the transmitted files or digital motifs contain personal data (in particular images of identifiable persons), all the aforementioned processing operations are carried out exclusively for the purpose of processing your online order.

After the order has been finally processed, the transmitted image files are automatically and completely deleted.

8.2 The personal data collected by us will be passed on to the transport company commissioned with the delivery within the scope of contract processing, insofar as this is necessary for the delivery of the goods. We pass on your payment data to the commissioned credit institution within the scope of payment processing, if this is necessary for payment processing. If special service providers are used for order processing, we explicitly inform about this below.

8.3 To fulfill our contractual obligations to our customers, we cooperate with external shipping partners. We pass on your name and delivery address exclusively to a shipping partner selected by us for the purpose of goods delivery.

8.4 Use of Special Service Providers for Order Processing and Fulfillment

- Order Printer Pro

For order processing, we use the following provider: FORSBERG+TWO, Tranegårdsvej 74, 2900, Hellerup, Denmark

Name, address, and, if applicable, other personal data are passed on to the provider for the purpose of processing the online order. The disclosure of your data only takes place insofar as it is actually necessary for the processing of the order. The provider is also used for accounting purposes. The provider processes incoming and outgoing invoices as well as, if applicable, the bank movements of our company to automatically record invoices, match them with transactions, and create financial accounting from them in a semi-automated process. If personal data is processed in this context, the processing is based on our legitimate interest in efficient organization and documentation of our business processes.

8.5 Use of Payment Service Providers

- Amazon Pay
If you select "Amazon Pay" as the payment method, payment processing is handled by the payment service provider Amazon Payments Europe s.c.a., 38 avenue John F. Kennedy, L-1855 Luxembourg (hereinafter: "Amazon Payments"), to whom we transmit your information provided during the order process, along with information about your order. The transmission of your data is solely for the purpose of payment processing with the payment service provider Amazon Payments and only to the extent necessary for this purpose. You can find more information about Amazon Payments' data protection regulations at the following internet address: https://pay.amazon.com/de/help/201751600
- Apple Pay
If you choose the "Apple Pay" payment method from Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, payment processing is done via the "Apple Pay" function of your iOS, watchOS, or macOS device by charging a payment card stored in "Apple Pay." Apple Pay uses security features built into your device's hardware and software to protect your transactions. To authorize a payment, you must enter a code you previously set and verify it using your device's "Face ID" or "Touch ID" function.
For payment processing purposes, your information provided during the order process, along with information about your order, is transmitted to Apple in encrypted form. Apple then re-encrypts this data with a developer-specific key before the data is sent to the payment service provider of the payment card stored in Apple Pay to carry out the payment. The encryption ensures that only the website where the purchase was made can access the payment data. After the payment is made, Apple sends your device account number and a transaction-specific, dynamic security code to the originating website to confirm successful payment.
If personal data is processed during the transmissions described, the processing is exclusively for the purpose of payment processing.
Apple retains anonymized transaction data, including the approximate purchase amount, approximate date and time, and whether the transaction was successfully completed. Anonymization completely excludes any personal reference. Apple uses the anonymized data to improve "Apple Pay" and other Apple products and services.
If you use Apple Pay on iPhone or Apple Watch to complete a purchase made on Mac via Safari, the Mac and the authorization device communicate over an encrypted channel on Apple servers. Apple does not process or store any of this information in a format that can identify you. You can disable the ability to use Apple Pay on your Mac in your iPhone settings. Go to "Wallet & Apple Pay" and disable "Allow Payments on Mac."
Further information on data protection for Apple Pay can be found at the following internet address: https://support.apple.com/de-de/HT203027
- Google Pay

If you choose the "Google Pay" payment method from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), payment processing is carried out via the "Google Pay" application on your mobile device running at least Android 4.4 ("KitKat") and equipped with an NFC function, by charging a payment card stored in Google Pay or a verified payment system there (e.g., PayPal). To authorize a payment via Google Pay exceeding €25, you must first unlock your mobile device using the verification method you have set up (such as facial recognition, password, fingerprint, or pattern).

For the purpose of payment processing, your information provided during the ordering process, along with information about your order, is transmitted to Google. Google then transmits your payment information stored in Google Pay in the form of a uniquely assigned transaction number to the originating website, with which a successful payment is verified. This transaction number contains no information about the actual payment data of your payment methods stored in Google Pay; instead, it is created and transmitted as a uniquely valid numerical token. For all transactions via Google Pay, Google acts solely as an intermediary for processing the payment. The transaction is carried out exclusively between the user and the originating website by charging the payment method stored in Google Pay.

If personal data is processed during the described transmissions, the processing is exclusively for the purpose of payment processing.

Google reserves the right to collect, store, and evaluate certain transaction-specific information for every transaction made via Google Pay. This includes the date, time, and amount of the transaction, merchant location and description, a description of the goods or services purchased provided by the merchant, photos you have attached to the transaction, the name and email address of the seller and buyer or sender and recipient, the payment method used, your description of the reason for the transaction, and, if applicable, the offer associated with the transaction.

According to Google, this processing is carried out exclusively on the basis of its legitimate interest in proper accounting, verification of transaction data, and the optimization and functional maintenance of the Google Pay service.

Google also reserves the right to merge the processed transaction data with other information collected and stored by Google when using other Google services.

The Google Pay terms of use can be found here:

https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=googlepaytos&ldl=de
Further information on data protection for Google Pay can be found at the following internet address:
https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=de
- PayPal Checkout

This website uses PayPal Checkout, an online payment system by PayPal, which consists of PayPal's own payment methods and local third-party payment methods.

When paying via PayPal, credit card via PayPal, direct debit via PayPal, or – if offered – "Pay Later" via PayPal, we transmit your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"), as part of the payment processing. The transmission occurs only to the extent necessary for payment processing.

PayPal reserves the right to conduct a credit check for payment methods such as credit card via PayPal, direct debit via PayPal, or – if offered – "Pay Later" via PayPal. For this purpose, your payment data may be transmitted to credit agencies based on PayPal's legitimate interest in determining your creditworthiness. PayPal uses the result of the credit check regarding the statistical probability of payment default to decide on the provision of the respective payment method. The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, among other things, but not exclusively, address data. You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.

If available and selected, for the PayPal payment method "purchase on account," your payment data will first be transmitted to PayPal for payment preparation, whereupon PayPal will forward it to Ratepay GmbH, Franklinstrasse 28-29, 10587 Berlin ("Ratepay") for payment execution. In this case, RatePay will, on its own behalf, carry out an identity and credit check to determine creditworthiness according to the principle mentioned above and will transmit your payment data to credit agencies based on its legitimate interest in determining creditworthiness. A list of credit agencies that Ratepay can access can be found here: https://www.ratepay.com/legal-payment-creditagencies/

When using a local third-party payment method, your payment data is first transmitted to PayPal for payment preparation. Depending on your selection of an available local payment method, PayPal then transmits your payment data to the corresponding provider for payment execution:

- Apple Pay (Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)
- Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)
- iDeal (Currence Holding BV, Beethovenstraat 300 Amsterdam, Netherlands)
- bancontact (Bancontact Payconiq Company, Rue d'Arlon 82, 1040 Brussels, Belgium)
- blik (Polski Standard Płatności sp. z o.o., ul. Czerniakowska 87A, 00-718 Warsaw, Poland)
- eps (PSA Payment Services Austria GmbH, Handelskai 92, Gate 2
1200 Vienna, Austria)
- MyBank (PRETA S.A.S, 40 Rue de Courcelles, F-75008 Paris, France)
- Przelewy24 (PayPro SA, Kanclerska 15A, 60-326 Poznań, Poland)

Further data protection information can be found in PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
- Shopify Payments

One or more online payment methods from the following provider are available on this website: Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland

If you choose a payment method from the provider where you pay in advance (such as credit card payment), your payment data provided during the order process (including name, address, bank and payment card information, currency, and transaction number) as well as information about the content of your order will be transmitted to this provider. The transmission of your data in this case is solely for the purpose of payment processing with the provider and only to the extent necessary for this purpose.
- Stripe
If you choose a payment method from the payment service provider Stripe, payment processing is handled by the payment service provider Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we transmit your information provided during the order process, along with information about your order (name, address, account number, bank code, possibly credit card number, invoice amount, currency, and transaction number). The transmission of your data is solely for the purpose of payment processing with the payment service provider Stripe Payments Europe Ltd. and only to the extent necessary for this purpose. Further information on Stripe's data protection can be found at the URL https://stripe.com/ch/terms

9) Retargeting/ Remarketing/ Recommendation Advertising

Meta Pixel

This website uses the "Meta Pixel" from Meta Platforms Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland ("Meta"). This allows user behavior to be tracked after they have viewed or clicked on a Facebook and/or Instagram ad. This process serves to evaluate the effectiveness of the ads for statistical and market research purposes and can help optimize future advertising measures.

The data collected is anonymous to us, meaning it does not provide us with any conclusions about the identity of the users. However, the data is stored and processed by Meta, making a connection to the respective user profile possible, and Meta can use the data for its own advertising purposes, in accordance with Meta's Data Usage Policy (https://www.facebook.com/about/privacy/). You can enable Meta and its partners to display ads on and off Facebook and/or Instagram. A cookie may also be stored on your computer for these purposes.

This may also involve the transfer of personal data to the servers of Meta Platforms Inc. in the USA.

To disable the use of cookies on your computer, you can set your internet browser so that no more cookies can be stored on your computer in the future, or already stored cookies are deleted. However, disabling all cookies may lead to some functions on our websites no longer being executable. You can also disable the use of cookies by third-party providers such as Meta on the Digital Advertising Alliance website: https://www.aboutads.info/choices/

We have concluded a data processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.

10) Tools and Other

Trusted Shops Trustbadge

To display our Trusted Shops seal of approval and to offer the Trusted Shops membership for buyers after an order, the Trusted Shops Trustbadge is integrated into this website.

The Trustbadge and the services advertised with it are an offer from Trusted Shops AG, Subbelrather Str. 15C, 50823 Cologne; Germany.

When the Trustbadge is called up, the web server automatically stores a so-called server log file, which contains, for example, your IP address, date and time of access, amount of data transferred, and the requesting provider (access data) and documents the access. This access data is not evaluated and is automatically overwritten at the latest seven days after the end of your visit to the page.

Further personal data is only transferred to Trusted Shops if you decide to use Trusted Shops products after completing an order or have already registered for their use. In this case, the contractual agreement made between you and Trusted Shops applies.

11) Rights of the Data Subject

The applicable data protection law grants you the following data subject rights (information and intervention rights) against the controller with regard to the processing of your personal data, with reference to the stated legal basis for the respective exercise conditions:

  • Right to information according to Art. 25 DPA
  • Right to data release or transfer according to Art. 28 DPA
  • Right to rectification according to Art. 32 Para. 1 DPA

12) Duration of Personal Data Storage

The duration of personal data storage is determined by the respective legal basis, the processing purpose, and – if applicable – additionally by the respective statutory retention period (e.g., retention periods under contract law).

When processing personal data based on explicit consent, the data concerned will be stored until you revoke your consent.

If statutory retention periods exist for data, this data will be stored for the legally prescribed duration.

Otherwise, personal data will be processed for as long as you do not expressly prohibit its processing, unless we can demonstrate an overriding interest in continued processing within the meaning of Art. 31 para. 2 DPA or a legal justification.