Privacy policy

Privacy Policy of duvet-könig.ch

In this Privacy Policy, we, DIMAG Bettwarenfabrik AG (hereinafter referred to as "DIMAG Bettwarenfabrik AG", "we" or "us"), explain how we collect and otherwise process personal data. This is not an exhaustive description; other privacy policies, general terms and conditions, terms of participation and similar documents may govern specific matters. Personal data means any information relating to an identified or identifiable person.

If you provide us with personal data of other persons (e.g. family members or work colleagues), please ensure that these persons are familiar with this Privacy Policy and only provide us with their personal data if you are permitted to do so and if such personal data is accurate.

This Privacy Policy is designed to meet the requirements of the EU General Data Protection Regulation ("GDPR"), the Swiss Data Protection Act ("DPA") and the revised Swiss Data Protection Act ("revDPA"). However, whether and to what extent these laws apply depends on the individual case.

1. Controller

The controller responsible for the data processing activities described herein is DIMAG Bettwarenfabrik AG, Merkurstrasse 11, CH-6020 Emmenbrücke. If you have any data protection concerns, you can contact us at the following address: Merkurstrasse 11, CH-6020 Emmenbrücke, shop@duvet-könig.ch.

2. Collection and Processing of Personal Data

We primarily process personal data that we receive from our customers and other business partners, as well as from other persons involved in the course of our business relationships, or that we collect from users when operating our websites, apps and other applications.

To the extent permitted, we also obtain certain data from publicly accessible sources (e.g. debt collection registers, land registers, commercial registers, the press and the Internet) or receive such data from other affiliated companies, public authorities and other third parties (such as address brokers).

In addition to the data that you provide to us directly, the categories of personal data that we receive about you from third parties include, in particular, information from public registers; information that we obtain in connection with administrative and judicial proceedings; information relating to your professional functions and activities (so that, for example, with your assistance we can conclude and process transactions with your employer); information about you contained in correspondence and discussions with third parties; credit information (insofar as we conduct business with you personally); information about you provided to us by persons in your environment (family members, advisers, legal representatives, etc.) so that we can conclude or process contracts with you or involving you (e.g. references, your delivery address, powers of attorney, information concerning compliance with legal requirements such as anti-money laundering regulations, information from banks, insurance companies, distributors and other contractual partners concerning the use or provision of services by you, such as payments made and purchases completed); information about you from the media and the Internet (where appropriate in the specific case, e.g. in connection with an application, press review, marketing/sales, etc.); your addresses and, where applicable, interests and other socio-demographic data (for marketing purposes); and data relating to the use of the website (e.g. IP address, MAC address of your smartphone or computer, information about your device and settings, cookies, date and time of your visit, pages and content accessed, functions used, referring website and location information).

3. Purposes of Data Processing and Legal Bases

We use the personal data we collect primarily to conclude and perform our contracts with our customers and business partners, including contracts with our customers and the procurement of products and services from our suppliers and subcontractors, as well as to comply with our legal obligations in Switzerland and abroad. If you work for such a customer or business partner, you may of course also be affected in this capacity with regard to your personal data.

In addition, to the extent permitted and where we consider it appropriate, we process your personal data and the personal data of other persons for the following purposes, in which we (and sometimes third parties) have a legitimate interest corresponding to the respective purpose:

• Providing and further developing our offerings, services, websites, apps and other platforms on which we are present;
• Communicating with third parties and processing their enquiries (e.g. applications and media enquiries);
• Reviewing and optimising procedures for needs analysis for the purpose of directly addressing customers, as well as collecting personal data from publicly accessible sources for customer acquisition;
• Advertising and marketing (including organising events), provided that you have not objected to the use of your data for these purposes. If we send you advertising as an existing customer, you may object at any time, in which case we will place you on a suppression list to prevent further advertising communications;
• Market and opinion research and media monitoring;
• Asserting legal claims and defending ourselves in connection with legal disputes and official proceedings;
• Preventing and investigating criminal offences and other misconduct (e.g. conducting internal investigations and data analyses to combat fraud);
• Ensuring our operations, in particular IT, our websites, apps and other platforms;
• Video surveillance to protect our premises and other measures for IT, building and facility security, and to protect our employees and other persons as well as assets belonging to us or entrusted to us (e.g. access controls, visitor lists, network and email scanners and telephone recordings);
• Purchasing and selling business divisions, companies or parts of companies, and other corporate transactions and the associated transfer of personal data, as well as measures relating to business management and, where necessary, compliance with legal and regulatory obligations and internal regulations.

If you have given us consent to process your personal data for specific purposes (for example, when registering to receive newsletters or when a background check is carried out), we process your personal data within the scope of and on the basis of this consent, insofar as we have no other legal basis and require one. Consent that has been given may be withdrawn at any time; however, this does not affect data processing that has already taken place.

4. Cookies / Tracking and Other Technologies Related to the Use of Our Website

We typically use "cookies" and comparable technologies on our websites and apps that enable your browser or device to be identified. A cookie is a small file that is sent to your computer or automatically stored on your computer or mobile device by the web browser you use when you visit our website or install our app. When you visit this website again or use our app, we can recognise you, even if we do not know who you are.

In addition to cookies that are used only during a session and deleted after your visit to the website ("session cookies"), cookies may also be used to store user settings and other information for a certain period of time (e.g. two years) ("persistent cookies"). However, you can configure your browser to reject cookies, store them only for one session or otherwise delete them prematurely. Most browsers are preset to accept cookies.

We use persistent cookies so that you can save user settings (e.g. language and automatic login), so that we can better understand how you use our offerings and content, and so that we can display offers and advertising tailored to you (which may also occur on websites of other companies; however, these companies do not learn from us who you are, even if we ourselves know, because they only see that the same user who visited a particular page on our website is also visiting their website).

Some cookies are set by us, while others are set by contractual partners with whom we cooperate. If you block cookies, certain functions (such as language selection, shopping cart and ordering processes) may no longer work.

In our newsletters and other marketing emails, where permitted, we sometimes also include visible and invisible image elements. By retrieving these elements from our servers, we can determine whether and when you opened the email, enabling us to measure and better understand how you use our offerings and to tailor them to you. You can block this in your email program; most email programs can be configured accordingly.

By using our websites and apps and consenting to receive newsletters and other marketing emails, you agree to the use of these technologies. If you do not wish this, you must configure your browser or email program accordingly, or uninstall the app if this cannot be adjusted through the settings.

We sometimes use Google Analytics or comparable services on our websites. This is a service provided by third parties that may be located in any country in the world (in the case of Google Analytics, the provider is Google Ireland, based in Ireland; Google Ireland relies on Google LLC, based in the USA, as a processor; both are referred to as "Google"), with which we can measure and evaluate the use of the website (on a non-personal basis).

Persistent cookies set by the service provider are also used for this purpose. We have configured the service so that visitors' IP addresses are shortened by Google in Europe before being transmitted to the USA and therefore cannot be traced back. We have disabled the "Data Sharing" and "Signals" settings.

Although we may assume that the information we share with Google does not constitute personal data for Google, it is possible that Google may use this data for its own purposes to draw conclusions about the identity of visitors, create personal profiles and link this data to those persons' Google accounts. If you have registered with the service provider yourself, the service provider also knows your identity. The processing of your personal data by the service provider is then carried out under the service provider's responsibility and in accordance with its privacy policy. The service provider only provides us with information about how our respective website is used (without providing any information about you personally).

We also use plugins from social networks such as Facebook, X, YouTube, Pinterest or Instagram on our websites. This is visible to you in each case (typically through the corresponding symbols). We have configured these elements so that they are deactivated by default. If you activate them by clicking on them, the operators of the respective social networks can register that you are on our website and where you are, and may use this information for their own purposes. The processing of your personal data is then carried out under the responsibility of the respective operator and in accordance with its privacy policy. We do not receive any information about you from the operator.

5. Disclosure of Data and Transfer of Data Abroad

As part of our business activities and for the purposes set out in Section 3, we also disclose data to third parties, to the extent permitted and where we consider it appropriate, either because they process the data on our behalf or because they wish to use it for their own purposes. This applies in particular to the following recipients:

• Our service providers, such as banks and insurance companies, including processors (e.g. IT providers);
• Dealers, suppliers, subcontractors and other business partners;
• Customers;
• Domestic and foreign authorities, public offices or courts;
• Media;
• The public, including visitors to websites and social media;
• Competitors, industry organisations, associations, organisations and other bodies;
• Other parties in potential or actual legal proceedings;

all collectively referred to as "Recipients".

Some of these Recipients are located in Switzerland, while others may be located anywhere in the world. In particular, you should expect your data to be transferred to countries in Europe and to the USA, where service providers used by us are located (such as Microsoft or Amazon).

If a Recipient is located in a country without adequate statutory data protection, we contractually require the Recipient to comply with applicable data protection requirements (for this purpose, we use the revised Standard Contractual Clauses of the European Commission), unless the Recipient is already subject to a legally recognised framework designed to ensure data protection or we can rely on a statutory exception.

An exception may apply in particular in connection with legal proceedings abroad, but also in cases of overriding public interests, where the performance of a contract requires such disclosure, where you have given your consent, or where the data concerned has been made generally accessible by you and you have not objected to its processing.

6. Retention Period for Personal Data

We process and store your personal data for as long as necessary to fulfil our contractual and legal obligations or otherwise for the purposes pursued by the processing, i.e. for example, for the duration of the entire business relationship (from the initiation and performance through to the termination of a contract), as well as thereafter in accordance with statutory retention and documentation obligations.

Personal data may be retained for the period during which claims can be asserted against our company and insofar as we are otherwise legally obliged to retain it or legitimate business interests require its retention (e.g. for evidence and documentation purposes).

As soon as your personal data is no longer required for the above-mentioned purposes, it will generally be deleted or anonymised where possible. Shorter retention periods generally apply to operational data (e.g. system protocols and logs).

7. Data Security

We take appropriate technical and organisational security measures to protect your personal data against unauthorised access and misuse, such as issuing instructions, providing training, implementing IT and network security solutions, and encrypting data carriers and data transmissions.

8. Obligation to Provide Personal Data

Within the scope of our business relationship, you must provide the personal data required to establish and conduct a business relationship and to fulfil the associated contractual obligations (as a rule, you are not legally obliged to provide us with data).

Without this data, we will generally not be able to conclude or perform a contract with you (or with the entity or person you represent). Likewise, the website cannot be used if certain information required to ensure data transmission (such as the IP address) is not disclosed.

9. Profiling and Automated Decision-Making

We process some of your personal data automatically for the purpose of evaluating certain personal aspects (profiling). In particular, we use profiling to provide you with targeted information and advice about products. In doing so, we use analytical tools that enable us to provide needs-based communication and advertising, including market and opinion research.

As a general rule, we do not use fully automated decision-making (such as that regulated by Art. 22 GDPR) for the establishment and performance of business relationships or otherwise. Should we use such procedures in individual cases, we will inform you separately where required by law and inform you of the associated rights.

10. Rights of the Data Subject

Within the scope of the data protection law applicable to you and to the extent provided therein (such as under the GDPR), you have the right to information, rectification and erasure, the right to restrict data processing and otherwise to object to our data processing, in particular processing for direct marketing purposes, profiling carried out for direct advertising purposes and other legitimate interests in processing, as well as the right to receive certain personal data for the purpose of transferring it to another controller (so-called data portability).

Please note, however, that we reserve the right to invoke the restrictions provided for by law, for example where we are obliged to retain or process certain data, where we have an overriding interest in doing so (to the extent that we may rely on such an interest), or where we require the data in order to assert claims.

If any costs are incurred by you, we will inform you in advance. We have already informed you in Section 3 about the possibility of withdrawing your consent.

Please note that exercising these rights may conflict with contractual agreements and may have consequences such as premature termination of the contract or costs. In such cases, we will inform you in advance where this is not already contractually regulated.

Exercising such rights generally requires that you clearly prove your identity (e.g. by providing a copy of an identity document where your identity is otherwise unclear or cannot be verified). To exercise your rights, you can contact us at the address specified in Section 1.

Every data subject also has the right to enforce their claims in court or to lodge a complaint with the competent data protection authority. The competent data protection authority in Switzerland is the Federal Data Protection and Information Commissioner (FDPIC).

11. Amendments

We may amend this Privacy Policy at any time without prior notice. The version currently published on our website shall apply. Where this Privacy Policy forms part of an agreement with you, we will inform you of any changes by email or by other appropriate means in the event of an update.

Version dated 1 June 2025