PRIVACY POLICY
We appreciate your interest in the online store
www.alexanderpavlov.com
and the services we offer. Protecting your privacy is particularly important to us.
This Privacy Policy describes how your personal information is collected, used, stored, and shared. Please read this Privacy Policy carefully before using the services of
“AP IMAGE BÜRO” GmbH
By registering or otherwise using the website of “AP IMAGE BÜRO” GmbH, you will be required to confirm that you have read, understood, and agree to this Privacy Policy.
DEFINITIONS USED
- Personal Data - any information relating to an identified or identifiable natural person.
- Data Subject - an identified or identifiable natural person (hereinafter referred to as "Client", "You", "Your").
- Client - a person who purchases Goods or Services from another company.
- Profiling - automated processing of Personal Data used to evaluate certain personal aspects related to a natural person.
- Data Controller - the entity that determines the purposes and means of processing personal data.
- Website - a collection of information and digital services consisting of web pages, images, videos, audio, and other materials within a single domain. In simple terms, the Website refers to the entire site alexanderpavlov.com
- Payment Service Provider - a third-party company that allows businesses to accept electronic payments.
- Contract - an official agreement, obligations, transactions between countries, institutions, companies, organizations, individuals for a specific period.
- Processor - a natural or legal person who processes Personal Data on behalf of the Data Controller.
- Data Subject's (Client's) Consent - a freely given, specific, informed, and unambiguous indication of the Client's wishes by which the Client, through a statement or a clear affirmative action, signifies agreement to the processing of their Personal Data.
- Account - not a bank account, but a regular account on the Website, created as a unique Client profile, by which the Data Controller identifies you as a registered user.
- Order Information - specific information collected, including the Client's name, billing address, shipping address, payment information (including credit card numbers), email address, and phone number, used by the Data Controller when the Client makes or attempts to make a purchase on the Website.
- Device Information - information automatically collected about individual web pages or products.
- Personal Information - combined information including both Order Information and Device Information.
GENERAL TERMS
- Your personal Data Controller is “AP IMAGE BÜRO” GmbH, registration number: CHE-312.442.636, registered address: Obermühle 4b, 6340 Baar, Switzerland, phone: +41 76 483 7279.
- Website - www.alexanderpavlov.com
- Your Personal Data processors are legal entities that process Personal Data on behalf of and according to the instructions of “AP IMAGE BÜRO” GmbH, and who are committed to complying with regulatory requirements in the field of data processing.
- “AP IMAGE BÜRO” GmbH is committed to protecting and respecting your privacy. We strive to ensure that our Personal Data processing complies with the European Parliament and Council Regulation (EU) 2016/679 of April 27, 2016, on the protection of natural persons regarding the processing of Personal Data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation - GDPR), and the Swiss Federal Data Protection Act (nFADP). The compliance of Swiss legislation with European legislation, particularly the European General Data Protection Regulation (GDPR), is ensured by nFADP.
- Payment Service Provider - Payment processing is provided by the payment platform www.worldline.com, therefore our company transfers the necessary Personal Data for payment processing to the platform owner. The applicable data protection regulations of Worldline Switzerland Ltd. can be accessed at: https://support.worldline.com/en-ch/home/merchants/payment-security
- We process your Personal Data as Joint Controllers. The Seller and the Payment Service Provider (collectively "We", "Us" or "Joint Controllers", “Data Controllers”) are Joint Controllers of data. This means that we have regulated and are jointly responsible for the processing and protection of your Personal Data.
WHEN PROCESSING PERSONAL DATA, THE DATA CONTROLLER
- Ensures the legality and fairness of Personal Data processing.
- Respects the rights of the Client.
- Provides the Client with transparent information about the collection, use, access, or other processing of their Personal Data, specifying the exact purposes of the processing.
- Ensures that Personal Data is adequate, relevant, and necessary for the purposes for which it is processed. The Data Controller processes only the data and to the extent necessary for its business operations to provide services/sell goods.
- Ensures that Personal Data is not stored longer than necessary, i.e., as long as the contract with the Client is in effect, as long as the Data Controller or the Client can exercise their legitimate interests in accordance with external regulatory acts, as long as either party has a legal obligation to retain the data, or as long as the Client's consent for the respective Personal Data processing is valid, if there is no other lawful basis for data processing. Once the Personal Data retention period has expired, the Personal Data is irreversibly deleted;
- Ensures the accuracy of Personal Data, and ensures that inaccurate Personal Data is corrected or deleted;
- Ensures that Personal Data is processed in a manner that ensures adequate security and confidentiality, including preventing unauthorized access to or unauthorized use of Personal Data and unauthorized access to systems and equipment used for data processing;
- Ensures that Personal Data is not transferred without secure and adequate protection.
LEGAL BASES FOR PROCESSING PERSONAL DATA
- Your Personal Data is processed based on the following legal grounds in accordance with the General Data Protection Regulation (GDPR):
- When your consent has been obtained;
- To ensure the performance of a contract;
- To ensure compliance with a legal obligation;
- To protect our or third parties' legitimate interests.
- If you choose not to provide Personal Data in certain parts or withdraw your consent entirely or partially (with respect to specific provided data), “AP IMAGE BÜRO” GmbH will not be able to provide the services that require the respective Personal Data.
- Based on the Personal Data you provide when registering on the websitewww.alexanderpavlov.com and after confirming the terms of the Privacy Policy, a unique user profile (Account) is created for you, through which the Data Controller identifies you as a registered Client on the website www.alexanderpavlov.com This will enable you to use the services or make purchases available to registered Clients in accordance with the terms of this Privacy Policy.
- By registering, the Client confirms that the provided Personal Data is accurate and correct and that they are over 18 years of age. If the Client provides incorrect (false) Personal Data or fails to update it, the Data Controller may not ensure the fulfillment of the specified contractual obligations. The Data Controller is not responsible for any losses that may arise if the Client has provided incorrect, false, or inaccurate Personal Data.
- By registering on the website, the Buyer confirms that they are competent and legally entitled to make purchases on the website in accordance with the terms of the Agreement.
- If the Client's submitted Personal Data changes, the Client must immediately inform the Data Controller by writing to the email: info@alexanderpavlov.com or by updating the respective Personal Data in the Client's registered user profile on the website.
- The Data Controller cannot verify the accuracy and truthfulness of the Personal Data provided by the Client. Upon accepting the Client's registration and the confirmation of the Privacy Policy terms, the Data Controller assumes that the Personal Data provided by the Client is accurate and correct.
PERSONAL DATA AND PURPOSES OF PROCESSING
- When you visit the Website, the Data Controller automatically collects certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device.
- Additionally, as you browse the Website, the Data Controller collects information about the individual web pages or products you view, the websites or search terms that referred you to the Website, and information about how you interact with the Website.
- When the Data Controller refers to Personal Information in this Privacy Policy, we are referring to both Device Information and Order Information.
THE DATA CONTROLLER PROCESSES PERSONAL DATA FOR THE FOLLOWING PURPOSES
- To identify the Client;
- To prepare and conclude the Agreement;
- To deliver goods and provide services (fulfillment of contractual obligations);
- For the advertisement and distribution of goods for commercial purposes;
- For customer service;
- To create and manage the Client's profile - Account;
- To review and process objections;
- For payment administration;
- To improve the operation of the Website;
- For statistical and market research;
- To ensure security.
THE DATA CONTROLLER PROCESSES THE FOLLOWING PERSONAL DATA
- For processing registration data: name, surname, email, password;
- For processing delivery data: name, surname, email, mobile phone, billing address, delivery method, payment method, payment information;
- Cookies: Client's browsing history and behavior on the Data Controller's website;
- For processing accounting data: order history, payment information, delivery information;
- For marketing information: name, surname, phone number, email address, device identification number;
- For claim rights: name, surname, contact information, order and delivery information.
- Personal data processing for commercial purposes is carried out only if the Client has given a freely provided, specific, informed, and unambiguous indication of their consent to such actions. The Client may object to receiving commercial notifications according to legal regulations by not giving their consent to receive commercial notifications.
- Personal data processing may be carried out automatically, including profiling of the Client to provide new, special, individualized offers from the Data Controller to a specific Client. This is based on information obtained and automatically collected from the Client’s personal data and previous purchases on the Data Controller's website, provided the Client has consented to it.
- The Data Controller may make automated decisions regarding the Client if the Client has given a freely provided, specific, informed, and unambiguous indication of their consent to such actions. The Client may object to automated decision-making in accordance with legal regulations by not consenting to the automated processing of personal data.
- Automated decision-making by the Data Controller is conducted, for example, to prepare and display commercial notifications (pop-up banners) on the website, to advertise the products available on the website, and to assist Clients in making their choices from the offered range of products, including information in commercial notifications (pop-up banners) about preferred products.
- The Data Controller also engages in automated decision-making to send reminders to the Client about items placed in their shopping cart on the website, and to request that the Client submit a review of a product, which, without identifying information, is included in statistics about the product’s rating.
- Opting out of receiving commercial notifications does not create any legal consequences for the Client and does not limit the Client's rights to purchase goods and services on the website.
- Opting out of automated data processing for the purposes mentioned in the regulations does not create any legal consequences for the Client and does not limit the Client's rights to purchase goods and services on the website.
- The collected Device Information is used by the Data Controller to help detect potential risks and fraud (in particular, your IP address) and more generally, to improve and optimize the website. For example, by generating analytical data on how Clients browse and interact with the website and to assess the success of marketing and advertising campaigns.
- To fulfill its obligations to the Client, the Data Controller has the right to transfer the Client’s personal data to partners and data processors who process the necessary data on behalf of the Data Controller. The data processor acts as the data controller of personal data.
DISCLOSURE OF PERSONAL DATA TO THIRD PARTIES
- Payment Service Providers: Financial transactions related to the purchase of goods on the website may be processed by our payment service providers. We disclose your financial transaction data to our payment service providers only to the extent necessary to process your payments, issue refunds, and handle complaints.
- Service Providers: For specific services, we may share your personal data with other service providers, such as website hosting services, courier services, server and technical maintenance services, email service providers, and accounting services.
- Legal Obligations and Protection: In addition to the aforementioned instances, we may disclose your personal data to fulfill our legal obligations, protect your interests or the interests of others, for example, by seeking judicial or governmental intervention.
- Government Authorities: We may disclose your personal data to government authorities in accordance with the laws and regulations of the Switzerland, following the procedures and extent prescribed by the applicable laws.
- Direct Marketing: With your consent, we may share your personal data with our partners who provide us with marketing services for direct marketing purposes.
- We only engage service providers who have implemented appropriate technical and organizational measures to ensure a level of data processing security that meets the requirements set forth in relevant laws, ensuring a level of personal data processing and protection equivalent to the standards of the General Data Protection Regulation (GDPR).
- In certain cases, in compliance with legal requirements, personal data may be accessed by our partners in third countries (i.e., countries outside the European Union and the European Economic Area) acting as data processors.
- In these cases, our partners in third countries ensure a level of data protection that is equivalent to the data protection level provided by us.
- We use Google Analytics to understand how our clients use the website. For more information on how Google uses your personal information, please read: Google Privacy Policy
- You can also opt out of Google Analytics here: Google Analytics Opt-Out
DATA PROCESSOR USES THE DEVICE INFORMATION USING THE FOLLOWING TECHNOLOGIES
- Cookies: Cookies are data files placed on your device or computer that often include an anonymous unique identifier.
- Log Files: Log files track actions occurring on the website and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.
- Web Beacons, Tags, and Pixels: Web beacons, tags, and pixels are electronic files used to record information about how you browse the website.
- These technologies help us understand how our clients interact with the website and improve our services.
COOKIE USAGE POLICY
- This website uses cookies to enhance the user experience, evaluate website visit statistics, and ensure its operation and functionality.
WHAT ARE COOKIES?
- Cookies are small text files that a web browser stores on a user's device (computer, mobile phone, tablet) to identify the browser or store information or settings. With cookies, the website gains the ability to retain user-specific settings and respond accordingly. You can disable or restrict the use of cookies, but without cookies, it may not be possible to fully utilize all website functions.
COOKIE USAGE PURPOSES
- Enhancing the user experience of the website.
- Ensuring the functionality of the website.
- Adapting the website's functionality to user usage habits and previously viewed content.
- Obtaining statistics about website traffic.
- Identifying users (for authentication purposes).
- Displaying personalized services and offers to users.
- Remembering if the user has consented to the use of cookies.
NECESSARY COOKIES
- These cookies are necessary for users to visit and browse the website's content and utilize its offered features. They identify the user's device but do not reveal the user's identity. Without these cookies, the website cannot function properly. These cookies are stored until they fulfill their function, but no longer than two years.
ANALYTICS AND STATISTICS COOKIES
- Statistics cookies provide website analytics and help improve its quality and user experience. The gathered statistics are aggregated, and no individual user is directly identified. Third-party cookies, such as Google cookies, are used for these purposes.
MARKETING AND RETARGETING COOKIES
- Marketing cookies help provide users with a personalized browsing experience by tailoring content and advertisements based on activities on the website. Third-party website features, like social networks, may be integrated using these cookies. They may enable personalized advertising. We cannot control third-party cookies, so we encourage you to review the privacy policy of the respective third party.
THIRD-PARTY COOKIES
- Third-party cookies are set by third parties whose services are used by the website. These cookies are used in analytics services, such as Google Analytics. Information generated by third-party cookies may be transmitted and stored outside the European Union.
HOW TO CONTROL COOKIES
- When you visit the website, you will see a notification about the use of cookies. You can choose to:
- Customize your selection by clicking "Accept All" or "Confirm Selected".
- Reject the use of cookies, except for necessary cookies.
- Accept all cookies.
- If you initially accept cookies but later decide to delete them, you can do so in your browser settings or by visiting the website's section for changing cookie settings.
CONFIRMING, LIMITING, AND DELETING COOKIES
- You can delete all cookies on your computer, and most browsers can be set to block cookie placement. However, please note that some services and functions may not work properly without cookies.
- Additional information on managing and adjusting cookie settings in various browsers is available at www.allaboutcookies.org
CHANGES TO THE TERMS
- We reserve the right to change these cookie usage terms at any time. All changes will be published on our website.
COMMERCIAL ANNOUNCEMENTS
- A commercial announcement is any electronic message intended for direct or indirect advertising of goods or services, or for promoting the image of a trader, organization, or individual engaged in commercial, business, or regulated professional activities. Information that provides direct access to general information about the service provider and its operations (domain name or email address) is not considered a commercial announcement.
- To provide information about products, services, promotions, and other activities offered on the website, the Data Controller may use Personal Data.
- By using the website, you can opt-in (give your consent) to receive commercial announcements.
- Client consent to receive commercial announcements remains valid until it is revoked (even after termination of the service contract). The client may unsubscribe from further commercial announcements at any time through one of the following methods:
- Making the appropriate selection in their user profile;
- Sending an email to info@alexanderpavlov.com;
- In-person at a retail location;
- Using the automated opt-out option provided in the commercial announcement, by clicking on the opt-out link at the end of the respective commercial announcement (email).
- The data controller ceases sending commercial announcements as soon as the client's request is processed. The processing of requests depends on technological capabilities and may take up to three business days.
BEHAVIORAL ADVERTISING
- As described earlier, the Data Controller utilizes the Client's Personal Information to provide targeted advertisements or marketing communications that, according to the Data Controller's judgment, may be of interest to the Client.
- For more information on how behavioral advertising works, you can visit the Network Advertising Initiative (NAI) educational page: www.networkadvertising.org/understanding-online-advertising/how-does-it-work
- Clients can opt out of behavioral advertising using the links provided below:
SOCIAL MEDIA PLUGINS
FACEBOOK, INSTAGRAM SOCIAL PLUGIN USAGE USING THE "2-CLICK SOLUTION"
- The website utilizes social plugins ("plugins") from social networks. To enhance Client data protection when visiting the website, plugins are integrated using the so-called "2-click solution".
- This integration ensures that when accessing the Data Controller's website containing such plugins, no connection is established with the servers of the respective social network. Only when the plugins are activated does the Client's browser create a direct connection to the servers of the respective social network.
- Subsequently, the associated service provider directly transmits the content of the plugin to the Client's browser and integrates it into the page. By integrating the plugins, service providers receive information that the Client's browser has accessed the relevant page of the Data Controller's website, even if the Client does not have a profile with the respective service provider or is not currently logged in.
- This information (including the Client's IP address) is transmitted directly from the Client's browser to the server of the respective service provider and stored there. If interacting with the plugins, such as by clicking the "Like" or "Share" button, relevant information is directly transmitted to the service provider's server and stored there.
- The information is also published on the social network and displayed to the Client's contacts there. This serves to protect the Data Controller's legitimate interests, which dominate in the context of balancing interests in optimal marketing of the Data Controller's offerings.
- For purposes, scope, and further processing of data collection by service providers, as well as communication options and Client-related rights and settings to protect privacy, please refer to the data protection information of the service providers:
Facebook: www.facebook.com/policy.php
Instagram: www.help.instagram.com/155833707900388
YOUR RIGHTS
- Access your Personal data that we store;
- Request correction of your Personal data that we store. Most of it can be corrected by accessing your Account;
- Request deletion of your Personal data ("right to be forgotten");
- Restrict the processing of your Personal data;
- Object to the processing of your Personal data;
- Object to the processing of your Personal data for direct marketing purposes;
- Object to automated processing of your Personal data;
- Data portability;
- Withdraw consent for the processing of your Personal data;
- Lodge a complaint with the supervisory authority.
- If you wish to exercise your rights or if you have any questions regarding the processing of your Personal data or the exercise of your rights, please contact us via email at: info@alexanderpavlov.com.
- If you believe that we are violating data protection laws when processing your Personal data, you have the right to lodge a complaint with the Data State Inspectorate.
- In all cases, before submitting a complaint, please contact us so that we can find an appropriate solution together.
CONSENT AND PRIVACY POLICY CHANGES
- By using the online store www.alexanderpavlov.com receiving Services, filling out Surveys, purchasing Gift Cards, and/or participating in activities organized by “AP IMAGE BÜRO” GmbH, the Client confirms their consent to the processing of Personal data.
- Revoking consent does not affect data processing carried out while the Client's consent was valid.
- Revoking consent does not stop data processing that is carried out based on other legal grounds.
- Upon receiving a Client's request to exercise their rights, the Data Controller verifies the Client's identity, evaluates the request, and fulfills it in accordance with regulatory requirements.
- The Data Controller sends the response to the Client by mail to the address provided in the written request, or electronically signed via email, taking into account the Client's preferred method of receiving the response.
- The Data Controller ensures compliance with data processing and protection requirements in accordance with regulatory requirements, and in case of objections from the Client, takes appropriate actions to resolve them. However, if resolution is not achieved, the Client has the right to lodge a complaint with the supervisory authority.
- The Data Controller reserves the right to unilaterally change and supplement the Privacy Policy at any time without prior notice, with changes published in the Privacy Policy section at www.alexanderpavlov.com
CONTACTING
- To enhance the quality of services provided by “AP IMAGE BÜRO” GmbH, we always welcome feedback from our clients and are ready to answer any questions that may arise.
- You can contact us using any convenient method of communication specified in the Privacy Policy or on the website www.alexanderpavlov.com in the Contacts section.
Data Controller: “AP IMAGE BÜRO” GmbH
Postal Address: Obermühle 4b, 6340 Baar, Switzerland
Email: info@alexanderpavlov.com
Phone: +41 76 483 72 79
Payment Service Provider: Worldline Switzerland Ltd.
Postal Address: Hardtrumstrasse 201, 8005, Zurich, Switzerland
Email: customerservices@worldline.com
Phone: +41 848 83 2000
Privacy Policy last updated: January 28, 2025.