Privacy policy

Privacy Policy

Coconuttogo GmbH manages this website (coconuttogo.com) Coconuttogo GmbH is registered in Zurich, Switzerland. Coconuttogo GmbH recognizes the importance of protecting personal and financial information. We have strict policies and security measures in place to protect the information you provide. By registering online with Coconuttogo GmbH, you consent to the processing and use of the personal information submitted in accordance with this Privacy Policy. This Privacy Policy applies to all protected personal data collected, managed or used by Coconuttogo GmbH.

What information is collected by Coconuttogo GmbH?

Our third-party service providers and we automatically collect certain information, called log files, from your device or web browser when you interact with the Services. This includes, for example, your IP address, your mobile device identifier, your browser and computer type, access time, the website from which you access, the URL you follow next, the pages you visit during your access, and your interaction with content or advertising on the Services.
Coconuttogo GmbH collects personal data from visitors to the website who register their details or use the internet store. In addition, Coconuttogo GmbH collects some protected personal data (e.g. name, address, telephone number(s), e-mail address, etc.) that you provide to us. We only process data that is related to the relationship between the customer and Coconuttogo GmbH. We do not process sensitive personal data (e.g. information about political opinions, ethnicity, health information and social security numbers) and we do not ask you to provide or transmit it to us.
We also use cookies and track IP addresses (as described below) to improve our services and enhance your experience with Coconuttogo GmbH. Coconuttogo GmbH does not collect or store credit card information from our online customers. In order to better serve you, we may combine the information you provide with other publicly available information.

Policy for minors

Coconuttogo GmbH does not want to collect personal information from anyone under the age of eighteen (18). If you are under the age of eighteen (18), please ask your parent or guardian to register.

How does Coconuttogo GmbH use your data?

If you provide Coconuttogo GmbH with your personal information in one of our stores or online, Coconuttogo GmbH will use this information with your consent to contact you about our special events or promotions, register you on our website, administer our website services and/or process your online orders. Otherwise, we will only use the information you provide to review our performance and improve our services to you or to communicate with you about orders you have placed online. We will only send you announcements or communications by email if you give us your consent to do so, either on our website or by providing your email address in one of our stores. We also use information about your product interests and your purchases from us and our partner companies, including Coconuttogo GmbH, to improve the design of our website and your shopping experience online and in-store.

 We may contact you by email, post or telephone, depending on your choice, to conduct market research and learn more about how we can improve our product offering. To better serve you, we may use the information you give us and combine information about your product interests and purchases with information from third parties, including demographic and publicly available information. We may also combine this information with information from our affiliates. We use this combined information to enhance and personalize your shopping experience with us and to communicate with you in accordance with this Policy.

Storage of data

 We store the data you have provided to us for a maximum of 5 years and only for the purposes stated above.

Do we share your information with others?

Coconuttogo GmbH does not sell, rent or share our customers' names, addresses, e-mail addresses or other personally identifiable information with Coconuttogo GmbH companies. Coconuttogo GmbH also works with selected third parties to maintain our website, manage your database, send emails and provide customer communications. If necessary, these third parties may process the data you provide to us exclusively on behalf of Coconuttogo GmbH, but we do not authorize any of these service providers to use your data in any other way. If the data is processed by such a third party, the same data protection rights apply as in this Privacy Policy.

 Otherwise, we will not disclose your data to third parties unless required to do so by law or in connection with a legal claim or proceeding. If Coconuttogo GmbH is acquired by another company or merged or consolidated, the information about Coconuttogo GmbH's customers will be made available to the new company. However, this new company will undertake to protect the confidentiality of your personal information in accordance with this Privacy Policy.

Security

Coconuttogo GmbH uses reasonable security measures to protect the information you provide to us. Although we will take all reasonable steps to protect your personal information from unauthorized access, use or disclosure, you accept that no data transmission over the Internet can be secure from access by unauthorized recipients, and we will not be responsible for any breach of security unless it is due to our negligence.

Accuracy and retention

You have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR) and data portability (Art. 20 GDPR) to all data that you have provided to us. In addition, you have the right to request Coconuttogo GmbH to restrict processing (Art. 18 GDPR), object to processing (Art. 21 GDPR) or even request the erasure of your personal data (Art. 17 GDPR) at any time. Contact us at hello@coconuttogo.com. Under EU law, you have the right to contact the competent supervisory authority (Art. 77 GDPR). If you are registered with Andrew & Cole on our website and would like us to remove you from our customer list, please contact hello@coconuttogo.com or click on the "Unsubscribe" button at the bottom of any COCONUT TO GO! newsletter.

About cookies and tracking

 We use tracking technologies such as cookies of all kinds, Google Adwords, Google Analytics, etc.
 Cookies are pieces of information that a website can send to your computer's browser for record-keeping purposes. We use cookies to keep track of which web pages you visit and how often, to make our website more user-friendly and to provide you with a better experience when you return to the website. For example, with your consent, we can save your password so that you do not have to re-enter it every time you visit our website. Most web browsers automatically accept cookies, but you do not have to accept them. To disable cookies, you should go to the "Help" tab of your browser or read the information provided with your browser software. However, your visit to our website will be greatly enhanced if cookies are not disabled. If you do not disable your cookies, you consent to us collecting and storing your personal data, including these cookies.

Hosting by Shopify
We use the store system of the service provider Shopify International Limited, Victoria Buildings, 2nd floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"), for the purpose of hosting and displaying the online store by way of order processing. All data collected on our website is processed on Shopify's servers. As part of the aforementioned Shopify services, data may also be processed as part of further processing on behalf of Shopify Inc. 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc. or Shopify Payments (USA) Inc. In the case of the transfer of data to Shopify Inc. in Canada, the appropriate level of data protection is guaranteed by the adequacy decision of the European Commission. Further information on data protection at Shopify can be found on the following website: https://www.shopify.de/legal/datenschutz
Further processing on Shopify servers other than those mentioned above only takes place within the communicated framework.

Visiting the website

 Each time a page is called up, access data is stored in a log file, the server log. The stored data record contains the following data:

• Your IP address (which uniquely identifies your computer)
• the remote host (name and IP address of the computer requesting the page)
• the time, the status, the amount of data transferred and the website from which you came to the requested page (referrer)
• the product and version information of the browser used (user agent)

Data processing when opening a customer account and for contract processing

In accordance with Article 6(1)(b) GDPR, personal data will continue to be collected and processed if you provide it to us for the performance of a contract or to open a customer account. Which data is collected can be seen from the respective input forms. Deletion of your customer account is possible at any time and can be done by sending a message to the above-mentioned address of the controller. After completion of the contract or deletion of your customer account, your data will be blocked with regard to tax and commercial retention periods and deleted after these periods have expired, unless you have expressly consented to the further use of your data or have reserved the right to further use of your data as permitted by law.

Data processing for order processing

In order to process your order, we work together with the following service providers who support us in whole or in part in the execution of the contracts concluded. Certain personal data is transmitted to these service providers in accordance with the following information.

 The personal data collected by us will be passed on to the transport company commissioned with the delivery as part of the contract processing, insofar as this is necessary for the delivery of the goods. We pass on your payment data to the commissioned credit institution within the scope of payment processing, insofar as this is necessary for payment processing. If payment service providers are involved, we will expressly point this out to you below. The legal basis for the transfer of data is Art. 6 (1) (b) GDPR.

 In order to fulfill our contractual obligations to our customers, we work together with external shipping partners. We pass on your name and delivery address and, if necessary for delivery, your telephone number to a shipping partner selected by us exclusively for the purpose of delivering the goods.

Use of payment service providers (payment services)

PayPal

When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "payment by installments" via PayPal, we pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"). The transmission takes place in accordance with Art. 6 para. 1 lit. b GDPR and only insofar as this is necessary for payment processing.
PayPal reserves the right to use the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "payment by installments" via PayPal before carrying out a credit check. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 para. 1 lit. f) GDPR on the basis of PayPal's legitimate interest in determining your solvency. PayPal uses the result of the credit check in relation to the statistical probability of a payment default to decide whether to offer the respective payment method. The credit report may contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data. Further information on data protection, including the credit agencies used, can be found in PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary to process payments in accordance with the contract.

Shopify payments

We use the payment service provider "Shopify Payments", 3rd Floor, Europa House, Harcourt Building, Harcourt Street, Dublin 2. If you choose a payment method offered by the payment service provider "Shopify Payments", the payment will be processed by the technical service provider "Stripe Payments Europe Ltd, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland", to whom we will transfer the data you provided during the ordering process as well as the information about your order (name, address, account number, bank code, credit card number if applicable, invoice amount, currency and transaction number) in accordance with Art. 6 para. 1 lit. b GDPR. Your data will only be passed on for the purpose of payment processing with Stripe Payments Europe Ltd. and only to the extent necessary. For more information about Shopify Payments' privacy policy, please visit the following web address: https://www.shopify.com/legal/privacy.

Amazon Pay
On our website we offer, among other things, the payment "Amazon Pay" with Amazon services. 
The provider is Amazon Payments Europe S.C.A. 5, Rue Plaetis - 2338 Luxembourg (registered number at the R.C.S. Luxembourg: B153265)

 If you choose to pay with Amazon Pay (Amazon Pay Checkout solution), Amazon Pay will collect various personal data from you. The Service enables users with an Amazon business account or an Amazon personal account to make payments to users with a merchant account or a business account via an internet or cell phone service or application (an "Application") and also enables users with a business account to receive payments from users with a personal account or a business account. Details can be found in the Amazon Pay privacy policy at the following link: https://pay.amazon.com

Newsletter & emails

We send you emails for various reasons. This may be an order confirmation or a registration confirmation. However, it may also be information about our services, provided you have not objected to such use. You can object to our services at any time by sending an e-mail to: info@altico.de.
 E-mails sent by us are stored by us and e-mails that are to be regarded as business letters are not deleted within the statutory retention period. We also record such bounced e-mail addresses in order to request an update of the e-mail address. In the case of our newsletter emails, we record (e.g. using so-called "tracking pixels") whether an email has been opened and which links in the email have been clicked on for the purpose of optimizing and tailoring our offers. We use this data to send you customized newsletter content.
 If you wish to object to this use of data, you can unsubscribe from our newsletters. To send our emails, we also use providers from the USA or Canada with whom we have concluded the necessary contracts for order processing.

Cookies

Our website partly uses so-called cookies. Cookies are small text files that are usually stored in a folder in your browser. Cookies contain information about the current or last visit to the website

·       Name of the website

• Expiration date of the cookies
• Any value

If cookies do not contain an exact expiry date, they are only stored temporarily and are automatically deleted as soon as you close your browser or restart your device. Cookies with an expiry date remain stored even if you close your browser or restart your device. Such cookies are only deleted on the specified date or if you delete them manually.

We use the following three types of cookies on our website:

• Required cookies (we need these, for example, to display the website correctly for you and to cache certain settings)
• Functional and performance-related cookies (these help us, for example, to evaluate technical data of your visit and thus avoid error messages)
• Advertising and analysis cookies (these ensure that, for example, advertisements for shoes are displayed if you have previously searched for shoes)

You can configure, block and delete cookies in your browser settings. If you delete all cookies from our website, some functions of the website may not be displayed correctly. The Federal Office for Information Security provides helpful information and instructions for common browsers: https://www.bsi-fuer-buerger.de/BSIFB/DE/Empfehlungen/einrichtungSoftware/einrichtungBrowser /Sicherheitsmasnahmen/Cookies/cookies_node.html.

 With the exception of technically necessary cookies, other types of cookies are only activated with express consent. This consent can be revoked at any time.

DATA EXCHANGE WITH FACEBOOK (APPLIES ONLY TO REGISTERED FACEBOOK USERS)

 We participate in a statistical program of Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA, which serves to identify Facebook users who have a similar usage profile to our existing customers ("Facebook Custom Audiences - Statistical Twins"). As part of this program, e-mail addresses of customers are transmitted to Facebook in anonymized form (as a so-called "hash"). The email address can no longer be derived from the transmitted data. Facebook itself uses the same procedure to hash the email addresses of its users, to compare this anonymized data and to determine whether one of our users is registered with Facebook with the same email address.

Facebook undertakes not to store this match or use it outside of this program. On this basis, third parties who use Facebook in a similar way to the customer are identified and we are given the opportunity to target these people. You will not receive any additional advertising or messages from us or from Facebook.

 If you are not registered with Facebook with the same e-mail address as with us, Facebook will not receive any information about you. Under no circumstances will we find out whether you are registered with Facebook or receive any other data about you.

 You hereby consent to the anonymized forwarding of your email address in the form described above. Although we can trust Facebook's assurances, we would like to point out that Facebook is not subject to German data protection law.

 The purpose and scope of the data collection and the further processing and use of the data by Facebook as well as your setting options for protecting your privacy can be found in Facebook's data protection information, which you can access at https://www.facebook. com/about/privacy/.

hotjar

We also use the web analysis service Hotjar from Hotjar Ltd. Hotjar Ltd. is a European company based in Malta (Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe. This tool makes it possible to track movements on the websites on which Hotjar is used (so-called heat maps), e.g. how far users scroll and which buttons users click and how often, and it is also possible to use the tool to obtain feedback directly from website users. This provides us with valuable information to make our websites even faster and more customer-friendly.

 When using this tool, we pay particular attention to the protection of your personal data. For example, we can only track which buttons have been clicked, how far the user has scrolled, the size of the device screen, the type of device and browser used, the location of the device (country only) and the preferred language used to view our website. Areas of the websites in which personal data of you or third parties are displayed are automatically hidden by Hotjar and are therefore not traceable at any time.

 The legal basis for the use is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, which can be explained in the context of our cookie banner. Consent can be revoked at any time via the cookie management.

Google Conversion Tracking
We use Google Conversion Tracking from Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (hereinafter: "Google") on our website to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer for you. Google Adwords places a cookie on your computer if you have reached our website via a Google ad.

If the user visits certain pages of the AdWords customer's website and the cookie has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to this page.

 Each AdWords customer receives a different cookie. This means that cookies cannot be tracked via the websites of AdWords customers. The information obtained
using the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. Google AdWords learns the total number of users who clicked on our ad and were redirected to a page with a conversion tracking tag. However, we do not receive any information with which users can be personally identified.

The legal basis for the use is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, which can be explained in the context of our cookie banner. Consent can be revoked at any time via the cookie management.

Google Tag Manager
We use Google Tag Manager, a service provided by Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland ("Google"). With the help of Google Tag Manager, website tags can be managed via an interface.

 According to Google, Google Tag Manager is a cookie-free domain that does not collect any personal data. Google Tag Manager triggers other tags, which in turn can collect data. Google Tag Manager has no access to this data. If deactivation has been carried out at domain or cookie level, this remains in place for all tracking tags implemented with Google Tag Manager.

 Further information on data protection can be found in Google's privacy policy: https://policies.google.com/privacy?hl=de&gl=de.

The legal basis for the use is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, which can be explained in our cookie banner. Consent can be revoked at any time via the cookie management.

Google reCAPTCHA
On this website, we also use the reCAPTCHA function of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). The function is primarily used to distinguish whether an input originates from a natural person or whether it is misused by machine and automated processing. The service includes the transmission of the IP address and other data required by Google for the reCAPTCHA service to Google and is carried out in accordance with Article 6 (1) (f) GDPR on the basis of our legitimate interest in determining individual personal responsibility on the Internet and preventing abuse and spam. When using Google reCAPTCHA, personal data may also be transferred to the servers of Google LLC. in the USA.

 Further information on Google reCAPTCHA and Google's privacy policy can be found at: https://www.google.com/intl/de/policies/privacy/

 Where required by law, we have obtained your consent in accordance with Art. 6 (1) (a) GDPR for the processing of your data as described above. You can revoke your consent at any time with effect for the future. To make use of your revocation, please use the option described above to lodge an objection.

Shopsync for Shopify:
This website uses the Shopify app "Shopsync" from ShopSync LLC, PO Box 252, Jefferson City, TN 37760, USA.

 With the help of ShopSync, the newsletter service "Mailchimp" is synchronized with our Shopify account in such a way that updates in the Mailchimp email lists (e.g. an opt-out of a newsletter recipient) are automatically saved on Shopify and new contact data generated by the conclusion of contracts on Shopify are automatically transferred to the Mailchimp email lists.

 In the first case, the data is processed in accordance with Art. 6 para. 1 lit. f) GDPR on the basis of our legitimate interest in the effective and cross-system maintenance of the advertising addressees' files and the efficient observance of legally significant status changes.

 In the second case, the user's first and last name, address and email address are combined with the transaction-related information (purchase amount, time and date of purchase) transmitted by ShopSync to Mailchimp exclusively on the basis of the user's express consent in accordance with Art. 6 para. 1 lit. a) GDPR after a contract has been concluded on Shopify for inclusion in the Mailchimp list.

 The data transferred in this way is not stored or retained
by ShopSync after synchronization. All information synchronized between Shopify and Mailchimp is transmitted via Secure Socket Layer (SSL) technology, and all transmitted information remains encrypted during the synchronization process.

 The synchronization process requires the transfer of information over a secure connection to servers hosted by Amazon Web Services in the United States.
 You can find
more information about data protection at ShopSync here: https://shopsync.io/privacy-policy

Social plugins

We use Facebook and Instagram plugins. When you open our website that contains a social plugin, your computer automatically connects to the provider's computer.

 Note: If you create an account or log in to your account
through a third-party social media site, Coconuttogo GmbH will have access to certain information on that site, such as your name, email address, account information, photos and friends list, and other information in accordance with the approval procedures established by that social media site. If you visit our website using a device through which you also interact with social networks, or if you use a social media feature such as a plugin (e.g. a Facebook Like button) to interact with us, you allow us continuous access to the information from your social media account. If you do not wish to share this information with the social network or with us, we recommend that you log out of all your social media accounts.

Acceptance of the privacy policy and changes

By accessing and using the COCONUT TO GO! website (including purchasing items through our website) or submitting personal information at a COCONUT TO GO store or other COCONUT TO GO point of sale, you consent to the collection, use and disclosure of your information by us in accordance with this Privacy Policy. Coconuttogo GmbH reserves the right to change its privacy policy or practices from time to time. We will post the updated policy on our website and therefore recommend that you check this page from time to time, especially each time you use our online store. You should therefore check this page for updated information, especially each time you use the online store. We will notify you of any changes to our privacy policy by posting these changes on our website.

Get in touch with us

If you have any comments or questions about our privacy policy, please email us at hello@coconuttogo.com or write to us at the following address:

Coconuttogo GmbH
Holbeinstrasse 20
CH-8008 Zurich
Switzerland