We, Haltho AG, based in Widnau (Switzerland), are pleased about your interest in our online shop and our digital offers related to strollers. The protection of your personal data is our highest priority.
We process your data in accordance with the applicable data protection regulations, in particular the European General Data Protection Regulation (GDPR) as well as – where applicable – the Swiss Data Protection Act (DPA).
Below we inform you transparently about which personal data are collected, processed, and used when using our website, our mobile applications, as well as within the framework of orders in our online shop.

1. Controller
   Haltho AG
   Unterlettenstrasse 10
   9443 Widnau
   Switzerland
   E-mail: service@mastswiss.com
   Phone: +41 71 577 06 10
   Website: www.mastswissdesign.com

2. General information on data processing
   The protection of your personal data is important to us. We process your data exclusively within the framework of the legal provisions of the GDPR and the Swiss Data Protection Act (DPA).
   Legal bases for processing
   • Art. 6 para. 1 lit. a GDPR – Consent
   • Art. 6 para. 1 lit. b GDPR – Contract execution
   • Art. 6 para. 1 lit. c GDPR – Legal obligation
   • Art. 6 para. 1 lit. f GDPR – Legitimate interest

3. Collection and storage of personal data
   When visiting our website, we automatically store the following data:
   • IP address
   • Date and time of the request
   • Browser type/version
   • Operating system
   • Referrer URL (the previously visited page)
   • Hostname of the accessing computer
   • Access status/HTTP status code
   These data serve system security, error analysis, and optimization.

4. Orders in the online shop
   When ordering through our online shop, we collect:
   • First name, last name
   • Address (delivery and billing address)
   • E-mail address
   • Telephone number (optional)
   • Payment data
   • Order details
   Purpose: Contract execution, shipping, and customer support.
   Legal basis: Art. 6 para. 1 lit. b GDPR

5. Payment processing
   For payment processing, we use the following providers:
   • PayPal – PayPal (Europe) S.à r.l. et Cie, S.C.A.
   https://www.paypal.com/de/webapps/mpp/ua/privacy-full
   • Klarna – Klarna AB
   https://www.klarna.com/de/datenschutz/
   • Visa / Maestro / Mastercard – via payment gateway providers (e.g., Stripe, Computop, or similar)
   Privacy policy available depending on provider.
   Payment data are used exclusively for the processing of your order.
   Legal basis: Art. 6 para. 1 lit. b GDPR

6. Shipping service provider
   For shipping, we cooperate with the following service provider:
   • DPD (Dynamic Parcel Distribution GmbH & Co. KG)
   Your address data (name, address, possibly e-mail for shipment tracking) will be transmitted for delivery.
   Privacy policy: https://www.dpd.com/de/de/datenschutz/
   Legal basis: Art. 6 para. 1 lit. b GDPR

7. Newsletter
   If you subscribe to our newsletter, we use your e-mail address exclusively for this purpose.
   • Registration takes place via double opt-in procedure
   • Unsubscription is possible at any time via the link in the newsletter or by e-mail
   Legal basis: Art. 6 para. 1 lit. a GDPR

8. Contact form & e-mail contact
   If you contact us via a form or by e-mail, we store your information for processing and response.
   Legal basis:
   • for contact: Art. 6 para. 1 lit. a or b GDPR

9. Cookies and tracking
   Our website uses cookies. Some are necessary, others help us improve our offer:
   Necessary cookies
   • e.g., for shopping cart function, language selection
   Analysis cookies (only with consent)
   Google Analytics
   Provider: Google Ireland Ltd.
   For analyzing user behavior, we use Google Analytics. Your IP address is processed anonymously.
   Legal basis: Art. 6 para. 1 lit. a GDPR
   Details: https://policies.google.com/privacy

a) Google Tag Manager
This website uses Google Tag Manager, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
The Tag Manager itself does not process personal data but enables the integration and management of tracking and analysis tools (e.g., Google Analytics, Meta Pixel).
Legal basis:
• Art. 6 para. 1 lit. a GDPR (consent via cookie banner)
• Legitimate interest exists only for purely technically necessary tags
Further info:
https://marketingplatform.google.com/about/tag-manager/use-policy/

b) Meta Pixel (formerly Facebook Pixel)
We use the Meta Pixel on our website, a web tracking service of Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland.
Purpose:
• Analysis of user behavior (e.g., clicks, page views, purchases)
• Optimization of Facebook/Instagram advertising (e.g., retargeting)
• Measurement of conversions (purchases after clicking on ads)
When visiting our website, Meta can assign the visit to your Facebook/Instagram account if you are logged in there.
Data processing takes place only with your consent via the cookie banner.
Legal basis: Art. 6 para. 1 lit. a GDPR
Meta also processes the data in the USA. EU standard contractual clauses apply to data transfers.
More information:
https://www.facebook.com/privacy/explanation
https://www.facebook.com/business/help/742478679120153
Use of TikTok Pixel
We use the TikTok Pixel (TikTok Technology Ltd.) for conversion tracking and targeted advertising. Pseudonymized data are collected, e.g., interactions on our website.
Legal basis: Consent (Art. 6 para. 1 lit. a GDPR)
TikTok may transfer data to third countries (e.g., USA), with protection mechanisms such as standard contractual clauses in place.
More: https://www.tiktok.com/legal/privacy-policy-eea
Use of Pinterest Retargeting Pixel
We use the Pinterest Tag to readdress visitors of our website on Pinterest. Cookies and pixels are used to analyze user behavior.
Legal basis: Consent (Art. 6 para. 1 lit. a GDPR)
More information: https://policy.pinterest.com/de/privacy-policy

Objection / Opt-out:
You can deactivate personalized advertising in the Meta account:
https://www.facebook.com/adpreferences/ad_settings/

Cookie consent (Consent Management)
On first visit, a cookie banner is displayed where you can manage your consent.

10. Hosting
    Our website is hosted by an external provider. This processes personal data only on our instructions (order processing according to Art. 28 GDPR).

11. Storage duration
    We store your personal data:
    • For the duration of the business relationship
    • Within statutory retention periods (e.g., invoice data: 10 years)
    • For newsletter subscription: until revocation

12. Your rights
    You have the following rights:
    • Access to your stored data (Art. 15 GDPR)
    • Correction of incorrect data (Art. 16 GDPR)
    • Deletion of your data (Art. 17 GDPR)
    • Restriction of processing (Art. 18 GDPR)
    • Data portability (Art. 20 GDPR)
    • Objection to data processing (Art. 21 GDPR)
    • Complaint to supervisory authority (Art. 77 GDPR)
    In Switzerland: Federal Data Protection and Information Commissioner (FDPIC)
    https://www.edoeb.admin.ch

13. Withdrawal of your consent
    You can withdraw any consent given at any time – by e-mail or via the unsubscribe link (e.g., newsletter). The legality of the previous processing remains unaffected.

14. Changes to the privacy policy
    We reserve the right to adapt this privacy policy to comply with current legal requirements or changes to our services.