Privacy policy

Last updated: June 22, 2026

The protection of your personal data is of utmost importance to WorldConnect AG. We process personal data exclusively in accordance with applicable data protection laws, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation, GDPR) and the Swiss Federal Act on Data Protection (FADP).

This Privacy Policy informs you about the personal data we collect when you use our online shop, the purposes for which we process it, the legal basis for this processing, and your rights as a data subject.

Data Controller

The data controller responsible for processing personal data is:
WorldConnect AG Data Protection Officer,
Viscosestrasse 46,
69443 Widnau,
Switzerland

Email: privacy@skrossfactorystore.com
Website: www.skross-factory-store.com

If you have any questions about data protection or the processing of your personal data, you can contact us at any time using the contact details above.

Use of our online shop

When you access our website, your browser automatically transmits information to our servers. This includes, in particular, your IP address, the date and time of access, your browser type, browser version, operating system, referrer URL, and the pages you visited.

This data is technically necessary to correctly display the content of our website, to ensure the security and stability of our systems, and to detect and prevent attacks on our IT infrastructure.

Processing is based on our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR.

The collected server log files are stored only as long as necessary to ensure system security and for error analysis.

Orders and Contract Processing

When you order products through our online shop, we process the personal data necessary for the execution of the purchase contract. This includes, in particular, your name, billing and delivery address, email address, telephone number, the products ordered, order history, and information on payment and delivery.

This processing is carried out for the purpose of carrying out pre-contractual measures and fulfilling the purchase contract concluded with you in accordance with Article 6(1)(b) GDPR.

Furthermore, we may be obligated to retain certain data due to commercial, tax, or accounting regulations. In these cases, processing is carried out in accordance with Article 6(1)(c) GDPR.

Customer Account

If you have the option of creating a customer account, we store the data you provide as well as information about your orders so that you can make future purchases more easily and view your order history.

This processing is carried out for the performance of the contract in accordance with Article 6(1)(b) GDPR.

The storage of certain information beyond the actual contract processing is based on our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR in efficient customer management and customer support.

Shopify

Our online shop is operated on the Shopify e-commerce platform.

For customers within the European Economic Area, the provider is Shopify International Limited, Victoria Buildings, 1–2 Haddington Road, Dublin 4, Ireland.

Shopify provides the technical infrastructure for operating our online shop. This includes hosting services, order management, customer accounts, security features, and other technical functions of the shop.

Processing is carried out for the performance of the contract pursuant to Art. 6 para. 1 lit. b GDPR and on the basis of our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR in the secure and efficient operation of our online shop.

Further information can be found at:

https://www.shopify.com/legal/privacy

Payment Processing

We work with various payment service providers to process payments. Depending on the payment method selected, the data required for payment processing is transmitted to the respective payment provider.

This may include, in particular, your name, billing address, email address, order value, and transaction-related information.

This data is processed for the performance of the purchase agreement pursuant to Article 6(1)(b) GDPR.

Where necessary, processing is also carried out to comply with legal obligations pursuant to Article 6(1)(c) GDPR and for fraud prevention based on our legitimate interest pursuant to Article 6(1)(f) GDPR.

Depending on the payment methods offered, credit card, Apple Pay, Google Pay, PayPal, or Klarna may be used, for example.

Shipping and Logistics

We work with external logistics and shipping service providers to deliver your order. For this purpose, we transmit the personal data required for delivery, in particular your name, delivery address, email address, and, if applicable, your telephone number.

This data is processed for the performance of the purchase agreement concluded with you pursuant to Article 6(1)(b) GDPR.

The selection of the shipping company used is made by our contracted logistics partners and depends on the destination country, shipping method, availability, and operational requirements. Data is only shared to the extent necessary for delivery.

Customer Service and Contact

When you contact us by email, contact form, or other means, we process the personal data you provide to handle your inquiry.

This includes, in particular, your name, contact details, and the content of your message.

Processing is carried out for the performance of pre-contractual measures or for the fulfillment of a contract in accordance with Article 6(1)(b) GDPR, or based on our legitimate interest in the efficient handling of customer inquiries in accordance with Article 6(1)(f) GDPR.

Newsletter and Marketing Communications

If you subscribe to our newsletter, we will use your email address to regularly send you information about SKROSS products, offers, promotions, and news.

Processing is carried out exclusively on the basis of your consent in accordance with Article 6(1)(a) GDPR. Registration is done via a double opt-in process.

You can withdraw your consent at any time with effect for the future by using the unsubscribe link in each newsletter or by contacting us.

For the purpose of analyzing and optimizing our newsletters, we may track whether emails are opened and which links are clicked.

Klaviyo

We use Klaviyo, a service provided by Klaviyo Inc., Boston, Massachusetts, USA, for sending newsletters and conducting marketing and customer communication activities.

Klaviyo enables us, in particular, to send newsletters, conduct automated marketing campaigns, segment recipient groups, analyze open and click rates, send abandoned cart emails, and provide personalized product recommendations.

In this process, personal data such as name, email address, purchase history, interaction data, and information about user behavior may be processed.

This processing is based exclusively on your consent pursuant to Art. 6 para. 1 lit. a GDPR or, where legally permissible, on our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR in effective customer communication and the optimization of our marketing activities.

If data is transferred to the USA, this is done on the basis of appropriate safeguards pursuant to Art. 46 GDPR, in particular through the conclusion of standard contractual clauses.

Cookies and Consent Management

Our website uses cookies and similar technologies. Cookies are small text files that are stored on your device and contain certain information.

We distinguish between technically necessary cookies, analytics cookies, and marketing cookies.

Technically necessary cookies are required to ensure the operation of the online shop and are used based on our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR.

Analytics and marketing cookies are used exclusively with your consent pursuant to Art. 6 para. 1 lit. a GDPR in conjunction with Art. 5 para. 3 of the ePrivacy Directive and the applicable national implementing regulations.

We use a consent management system to manage and document the consents you have given. This allows you to view, adjust, or withdraw your cookie settings at any time.

The consent management system stores your consent decisions to demonstrate compliance with data protection requirements. The processing is carried out to fulfill our legal obligations pursuant to Art. 6 para. 1 lit. c GDPR and to protect our legitimate interest in the legally compliant management of consents pursuant to Art. 6 para. 1 lit. f GDPR.

You can change or withdraw your consent at any time via the cookie settings on our website with effect for the future.

Analytics and Marketing Services

If you have given your consent, we use analytics, tracking, and marketing services to improve our online shop, to measure the success of advertising campaigns, and to optimize our offerings.

The processing is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR.

Google

We may use the following Google services:

Google Analytics 4
Google Tag Manager
Google Consent Mode v2
Google Ads Conversion Tracking
Google Ads Remarketing
Google Shopping Ads
Google Performance Max

The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Taboola

To deliver and optimize personalized advertising content, we may use the following services:

Taboola Pixel
Taboola Conversion Tracking

Provider: Taboola Inc., New York, USA.

Shopify Analytics

We use Shopify Analytics to analyze the use of our online shop. This involves evaluating statistical information about visitor traffic, usage patterns, and order processes.

Social Media

We maintain company profiles on social networks such as Facebook, Instagram, LinkedIn, YouTube, and Pinterest.

When you visit our social media pages, the respective platform operators process personal data independently. We have only limited influence over the data processing by these providers.

Further information can be found in the privacy policies of the respective platform operators.

International Data Transfers

When using certain service providers, it may be necessary to transfer personal data outside the European Union or the European Economic Area.

Such transfers are carried out exclusively in accordance with Articles 44 to 49 of the GDPR.

Insofar as there is no adequacy decision by the European Commission, we base the data transfer on appropriate safeguards, in particular the standard contractual clauses approved by the European Commission pursuant to Article 46 of the GDPR.

When using Shopify, Google, Meta, Klaviyo, Reddit, Taboola, or similar service providers, personal data may be transferred to countries outside the European Union or the European Economic Area. Unless an adequacy decision has been issued by the European Commission, data transfers are based on appropriate safeguards pursuant to Article 46 of the GDPR, in particular using the standard contractual clauses approved by the European Commission.

Recipients of personal data

To fulfill our contractual and legal obligations, as well as to provide and optimize our online shop, personal data may be transferred to external recipients, insofar as this is necessary for the respective processing purposes.

These include, in particular:

Shopify and affiliated technical service providers;
Google services;
Meta services;
Klaviyo;
Reddit;
Taboola;
Payment service providers;
Logistics, shipping, and fulfillment service providers;
IT, hosting, maintenance, and support service providers;
Tax, accounting, auditing, and legal service providers;
Authorities, courts, or other public bodies, insofar as we are legally obligated to do so or this is necessary for the establishment, exercise, or defense of legal claims.

Personal data is transferred exclusively to the extent necessary and in compliance with applicable data protection regulations. Where external service providers process personal data on our behalf, we ensure through appropriate contractual agreements that the processing is carried out exclusively according to our instructions and in accordance with applicable data protection laws.

Data Retention Period

We store personal data only as long as necessary for the respective processing purposes or as required by law.

Personal data processed in connection with orders, contracts, invoices, or other business transactions is stored for the duration of the statutory retention periods under commercial, tax, and accounting law. These periods are generally up to ten years.

Data from customer service inquiries and other correspondence is stored only as long as necessary to process your request, document our business relationship, or fulfill legal obligations.

Data that we process based on your consent, particularly in connection with newsletters or marketing activities, is stored until you withdraw your consent or until the respective processing purpose ceases to apply.

Technical log and security data is stored only for the period necessary to ensure system security, for error analysis, and to prevent misuse.

After the respective retention periods have expired, personal data is deleted or anonymized unless legal, contractual, or legitimate interests preclude deletion.

Data Security

We take appropriate technical and organizational measures in accordance with Article 32 of the GDPR to protect personal data from loss, misuse, manipulation, or unauthorized access.

These measures include, in particular, encryption technologies, access restrictions, security monitoring, firewalls, and regular security audits of our systems.

Your Data Protection Rights

Provided the legal requirements are met, you have the following rights:

Right of access pursuant to Art. 15 GDPR
Right to rectification pursuant to Art. 16 GDPR
Right to erasure pursuant to Art. 17 GDPR
Right to restriction of processing pursuant to Art. 18 GDPR
Right to data portability pursuant to Art. 20 GDPR
Right to object pursuant to Art. 21 GDPR
Right to withdraw consent pursuant to Art. 7 para. 3 GDPR
Right not to be subject to a decision based solely on automated processing pursuant to Art. 22 GDPR

Where the Swiss Federal Act on Data Protection (FADP) is applicable, data subjects also have the rights provided for under Swiss data protection law.

To exercise your rights, you can contact us at any time at privacy@skrossfactorystore.com.

Right to lodge a complaint

If you believe that the processing of your personal data violates applicable data protection law, you have the right, pursuant to Article 77 of the GDPR, to lodge a complaint with a competent data protection supervisory authority.

Lodging a complaint does not affect any other administrative or judicial remedies.

Data subjects in Switzerland may also contact the Federal Data Protection and Information Commissioner (FDPIC), provided the requirements of the Swiss Federal Act on Data Protection are met.

Changes to this Privacy Policy

We reserve the right to amend this Privacy Policy at any time to adapt it to changes in legal, technical, or business requirements.

The version published on our website at the time of your visit applies.