Privacy policy

 

1. What is the purpose of this Privacy Policy? 

Anita S. AG, Aurorastrasse 2, 8032 Zurich (hereinafter “Alita” or also “we”, “us”) collects and processes personal data relating to you or to other persons (so-called “third parties”). We use the term “data” here as synonymous with “personal data” or “personal data”.

In this Privacy Policy we describe what we do with your data when you use https://shopalita.com/ or other websites of ours (hereinafter collectively “Website”), obtain or use our services or products, in connection with the performance of contracts, enter into a partnership with us (Collab), communicate with us or otherwise interact with us. We may also inform you separately about the processing of your data (e.g. in forms, contractual terms and conditions or additional privacy policies).

If you disclose data about other persons to us (e.g. family members, work colleagues), we assume that you are authorised to do so and that such data is accurate. By transmitting data about third parties, you confirm this. Please also ensure that such third parties have been informed about this Privacy Policy.

This Privacy Policy is aligned with the Swiss Federal Act on Data Protection (“FADP”), together with its implementing ordinances, and with the requirements of the EU General Data Protection Regulation (“GDPR”). Whether and to what extent these laws are applicable depends on the individual case.

2. Who is responsible for the processing of your data? 

The controller responsible under data protection law for the processing of data described in this Privacy Policy is Anita S. AG unless otherwise communicated in individual cases.

You may contact us regarding data protection concerns and to exercise your rights as follows:

Anita S. AG
Aurorastrasse 2
8032 Zürich
info@shopalita.com

3. What data do we process? 

We process various categories of personal data about you. The main categories are as follows:

  • Master data: These are basic data (e.g. name, contact details), further information about you (e.g. regarding roles and functions) and your relationship with us (e.g. customer, supplier, service provider, collab partner or employee of such, etc.), bank account details, date of birth, photographs, copies of identity documents, customer history, any powers of attorney, signatory authorisations and declarations of consent, information about third parties (e.g. contact persons, representatives).
  • Registration data: These are data that arise in connection with a registration (e.g. on our website) or that you provide to us (e.g. email address, password), as well as data generated in connection with competitions or when redeeming vouchers.
  • Contractual data: These are data generated in connection with a contract concluded with us (e.g. purchase contracts via our online shop or cooperation agreements with our collabs) or in the course of providing our services, such as details about the type of contract, date of conclusion, duration, contractual services, pre-contractual data, information required or used for performance (e.g. invoicing or customer service information), information about responses (e.g. complaints or satisfaction feedback), financial data (e.g. creditworthiness, dunning and debt collection information).
  • Communication data: This includes data generated in connection with communications between us and with third parties (e.g., via contact forms, email, telephone, post, chat, or other means of communication), such as the content of emails or letters, your contact details, and metadata relating to the communication, as well as, where applicable, a copy of an identification document.
  • Technical data: These are data generated in connection with the use of our electronic services (e.g., our website), including your IP address, information about your device’s operating system, the region from which you access our services, and the date and time of use. Technical data alone generally do not permit the identification of an individual. However, they may be combined with other categories of data (e.g., registration data) and may therefore, where applicable, be linked to you.
  • Behavioural and preference data: These are data about your behaviour and preferences, such as responses to electronic communications, navigation on the website, interactions with our social media profiles, supplemented where applicable with information from third parties (including from publicly accessible sources). For further information on tracking, see section 13.
  • Applicant data: These are data that we process in connection with a job application and which are contained, among other things, in your application documents (e.g. professional background, education and training, references). We may also obtain data from public sources, such as professional social networks, the internet or media.
  • Other data: These may include, among other things: data arising in connection with regulatory or judicial proceedings (e.g. case files, evidence, etc.), photographs, video or audio recordings made by us or received from third parties in which you are identifiable (e.g. at events), participation in events or promotional activities (e.g. competitions and events), and when and how you use our systems.

4. What are the sources of the data? 

  • From you: Many of the data referred to in section 3 are provided to us directly by you (e.g. in the course of communications with us, in connection with contracts or our services, through the use of our website and other services, etc.). You are not obliged to disclose your data except in specific individual cases (e.g. legal obligations). However, if you wish to enter into contracts with us or use our services (for yourself or for your employer or principal), you must provide us with certain data (in particular master data, contractual data and registration data). When using our website, the processing of technical data is unavoidable. With regard to behavioural and preference data, you generally have the option to object or to withhold your consent.
  • From third parties: To the extent permitted, we may also obtain data from publicly accessible sources (e.g. debt enforcement registers, land registers, commercial registers, media or the internet including social media) or receive such data from authorities and other third parties (e.g. credit reference agencies, address brokers, associations, contractual partners, internet analytics services, etc.). These include in particular the following categories: master data, contractual data and other data, as well as all other data categories pursuant to section 3 and data from correspondence and meetings with third parties. If you act on behalf of an employer or principal or for any other person that is in a business relationship or otherwise dealing with us, such person may also disclose data about you to us.

5. For what purposes do we process your data? 

  • Communication: In order to communicate with you (e.g. to respond to enquiries, provide information and perform contracts), we must process data about you. For this purpose we use in particular communication data and master data, and in connection with services used by you also registration data. If we need or wish to verify your identity, we collect additional data (e.g. a copy of an identity document).
  • Conclusion, management and performance of contracts: In connection with the conclusion and performance of contracts with our customers, suppliers, subcontractors or other contractual partners, we process related personal data. For this purpose we also process data to carry out creditworthiness checks, to open and manage the customer relationship, to provide information and customer support, and to provide and enforce contractual services (which also includes engaging third parties such as logistics companies, advertising service providers or credit reference agencies, who may in turn provide data to us). This also includes the enforcement of contractual claims (debt collection, legal proceedings, etc.), bookkeeping, the termination of contracts and public communications. For these purposes we use in particular master data, contractual data and communication data, and where applicable also registration data of the customer or the persons to whom the customer arranges services, as well as technical data (e.g. in the case of digital services).
  • Marketing purposes and relationship management: For marketing purposes and relationship management, we process data to send personalised advertising (e.g. by post, email, or other electronic channels) regarding products, services and other news from us and from third parties (e.g. product partners) to our customers, other contractual partners and other interested parties. You may opt out of such contacts at any time, or refuse or withdraw consent to being contacted for advertising purposes by notifying us (section 2). With your consent, we may target our online advertising more specifically towards you (see section 13). This also includes interaction with existing customers and their contacts, which may be personalised on the basis of behavioural and preference data. Finally, we also enable our contractual partners to address our customers and other contractual partners for advertising purposes (see section 8). For marketing purposes and relationship management, we process in particular communication data, registration data, and behavioural and preference data.
  • Market research, improvement of our services and operations, and product development: In order to continuously improve our products and services (including our website) and to respond quickly to changing needs, we analyse, for example, how you navigate our website or which products are used by which groups of persons and in what manner, and how new products and services can be designed (for further details see section 13). This provides us with insights into the market acceptance of existing and the market potential of new products and services. For this purpose we process in particular master data, behavioural and preference data, but also communication data and information from customer surveys, polls and studies, as well as further information, e.g. from the media, social media, the internet and other public sources.
  • Registration and security purposes as well as technical and physical access controls: In order to use certain services and offerings (e.g. login areas), you must register (directly with us or via our external login service providers), for which purpose we process data. We also collect further personal data about you during the use of the service or offering. We continuously review and improve the appropriate security of our IT systems and other infrastructure (e.g. buildings). We therefore process data, e.g. for monitoring, controls, analyses and testing of our networks and IT infrastructure, for system and error checks, for documentation purposes and in the context of backups. Access controls include controls over access to electronic systems (e.g. logging in to user accounts). For these purposes we process in particular registration and technical data, as well as other data referred to in section 3.
  • Compliance with laws, directives and recommendations of authorities, and internal regulations ("Compliance"): In the context of compliance with laws, we may process personal data (e.g. tax obligations). Processing activities may also arise in connection with internal investigations and external investigations (e.g. by a criminal prosecution authority, supervisory authority, or a commissioned private body). For this purpose we process in particular master data, contractual data and communication data, but in some circumstances also behavioural data, technical data and data from the categories of other data. The legal obligations may be those under Swiss law or foreign provisions to which we are subject, as well as self-regulatory frameworks, industry standards, our own corporate governance, and regulatory instructions and requests.
  • Job applications: If you apply for a position with us, we collect and process the relevant data for the purpose of evaluating the application, conducting the recruitment process and, in the case of successful applications, for the preparation and conclusion of the relevant contract. The processing of data in connection with the employment relationship is governed by a separate privacy policy.
  • Further purposes: These further purposes include, for example, training and educational purposes, administrative purposes (e.g. management of master data or accounting), protection of our rights, and evaluation and improvement of internal processes. We may record telephone or video conferences for training, evidence and quality assurance purposes. The protection of further legitimate interests also forms part of the further purposes, which cannot be listed exhaustively.

6. On what legal basis do we process your data? 

The processing of your data by us is based, depending on the situation and purpose of processing – where required – on the following legal bases:

  • Contract: To the extent we process data for the conclusion and performance of contracts that we conclude or have concluded for you or with you, your employer, principal or other persons on whose behalf you act, this also constitutes the legal basis on which we process your data.
  • Legal obligations: We may also process your data on the basis of applicable statutory, regulatory and professional rules.
  • Legitimate interests: We may process your data on the basis of our legitimate interests or those of a third party. This applies in particular with regard to achieving the purposes and objectives set out in section 5 and implementing related measures. We have, among other things, a legitimate (and overriding) interest in marketing our products and services, in gaining a better understanding of the markets relevant to us and our activities, in managing our business efficiently and effectively, and in maintaining the security of our systems and protecting our interests vis-à-vis third parties.
  • Consent: When we ask for your consent to the processing of your data, this constitutes the legal basis on which we process your data. We will inform you of the purpose of the processing. You may withdraw your consent at any time by written notice (by post or, unless otherwise indicated or agreed, by email) to us, with effect for the future (see section 2 for our contact details and section 13 for withdrawal of your consent in the area of online tracking). Once we have received and processed the notice of withdrawal of your consent, we will no longer process your data for the purposes to which you originally consented (unless the further processing may be carried out on another legal basis).
  • Other legal bases: In specific cases, we may also carry out data processing on the basis of other legal bases. If this is the case, we will inform you accordingly in the individual case.

7. What applies to profiling? 

We use on our website Profiling (automated processing of data) to analyse your interests, preferences or behaviour and to personalise our offerings. This serves to provide you with relevant information and offers (e.g. marketing analyses). For this purpose we use in particular behavioural and preference data, technical data and communication data (e.g. your response to advertising and other communications). Profiling helps us to continuously improve and better adapt our offerings to your individual needs, to plan our business activities, to assess the likelihood that a transaction is fraudulent, and to better support you through our customer service. To improve the quality of our analyses and forecasts, we may also create profiles, i.e. link personal data from various sources in order to better understand you as a person with your various interests and characteristics. In both cases, we ensure the proportionality and reliability of the results and take measures against any potential misuse.

8. To whom do we disclose your data? 

In connection with our contracts, the website, our services and products, our legal obligations or otherwise to protect our legitimate interests and for the further purposes listed in section 5, we make your data available to the following recipients:

  • External service providers: We engage service providers both domestically and abroad (third parties), e.g. IT service providers, shipping service providers, transport companies, etc.;
  • Contractual partners, including customers: This refers primarily to customers and other contractual partners of ours where a transfer of your data arises from the contract. Recipients also include contractual partners with whom we cooperate or who conduct advertising activities on our behalf. Recipients generally process the data on their own responsibility.
  • Authorities: We may disclose personal data to public offices, courts and other authorities in Switzerland and abroad where we are legally obliged or entitled to do so, or where this appears necessary to protect our interests. Recipients process the data on their own responsibility.
  • Other persons: This refers to other cases where the involvement of third parties arises from the purposes pursuant to section 5. Other recipients include, e.g. delivery addresses or payment recipients specified by you, third parties in the context of representation relationships (e.g. your lawyer or your bank), or persons involved in regulatory or court proceedings. If we cooperate with media and transmit material to them (e.g. photographs), you may also be affected in certain circumstances.

All these categories of recipients may in turn engage third parties, so that your data may also become accessible to them. 

9. Are your personal data also transferred abroad? 

We process and store personal data primarily in Switzerland and in the European Economic Area (EEA). However, we may occasionally also transfer personal data to service providers and other recipients (see section 8) that are located outside this territory or that process personal data outside this territory, in principle in any country of the world.

If a recipient is located in a country that does not provide an adequate level of data protection under applicable law, we contractually require the recipient to comply with the applicable data protection requirements (for this purpose, we use the revised Standard Contractual Clauses of the European Commission), unless the recipient is already subject to a legally recognized framework ensuring an adequate level of data protection or we can rely on a statutory exception. Such an exception may apply, in particular, in connection with legal proceedings abroad, where overriding public interests exist, where the performance of a contract requires such disclosure, where you have given your consent, or where the data concerned have been made generally accessible by you and you have not objected to their processing.

Please also note that data exchanged over the internet is frequently routed via third countries. Your data may therefore be transferred abroad even where the sender and recipient are located in the same country.

10. How long do we process your data? 

We process your data for as long as our processing purposes, the statutory retention periods and our legitimate interests in processing for documentation and evidence purposes so require, or as long as storage is technically necessary (e.g. in the case of backups or document management systems). Where no legal or contractual obligations preclude this, we delete or anonymise your data upon expiry of the retention or processing period as part of our standard procedures.

Where no statutory retention requirements apply in the individual case, we generally process personal data for the duration of the business relationship or contractual term and thereafter, depending on the applicable legal basis, for a further five, ten or more years. This corresponds to the period within which we or third parties may assert legal claims against each other. Ongoing or anticipated legal proceedings may result in processing beyond this period. Section 13.2 contains further information on the retention periods of cookies.

11. How do we protect your data? 

We take appropriate technical and organisational security measures to maintain the confidentiality, integrity and availability of your personal data, to protect it against unauthorised or unlawful processing and to counter the risks of loss, inadvertent alteration, unintended disclosure or unauthorised access. However, security risks cannot be entirely excluded in general; a certain residual risk is unavoidable.

12. What rights do you have? 

Applicable data protection law grants you, under certain circumstances, the right to object to the processing of your data, in particular processing for the purposes of direct marketing, profiling carried out for direct advertising purposes, and further legitimate interests in processing.

To facilitate your control over the processing of your personal data, you also have the following rights in connection with our data processing, depending on the applicable data protection law:

  • The right to request information from us as to whether and which data we process about you;
  • the right to have data rectified if it is inaccurate;
  • the right to request the erasure of data;
  • the right to request that we provide certain personal data in a commonly used electronic format or transfer it to another controller (data portability);
  • the right to withdraw consent to the extent our processing is based on your consent;
  • the right to obtain, upon request, further information necessary for the exercise of these rights.

If you wish to exercise the above-mentioned rights against us, please contact us in writing, in person at our premises, or, unless otherwise indicated or agreed, by email; our contact details are set out in section 2. In order to prevent misuse, we are required to verify your identity (e.g. by means of a copy of an identity document, where this cannot be done by less extensive means).

You also have these rights against other bodies that cooperate with us on their own responsibility – please contact these directly if you wish to exercise rights in connection with their processing. Information about our key cooperation partners and service providers can be found in section 8, and further information in section 13.

Please note that conditions, exceptions or restrictions may apply to these rights under applicable data protection law (e.g. to protect third parties or trade secrets). We will inform you accordingly where appropriate.

If you are of the opinion that the processing of your data violates applicable data protection law, please notify us (section 2). In particular, if you are located in the EEA or Switzerland, you also have the right to lodge a complaint with the data protection supervisory authority of your country. A list of the authorities in the EEA can be found here: https://edpb.europa.eu/about-edpb/board/members_de. You may also contact the Swiss Federal Data Protection and Information Commissioner: https://www.edoeb.admin.ch

13. Do we use online tracking, online advertising techniques and similar technologies? 

On our website (including newsletters and other digital offerings) we use various technologies (e.g. cookies, fingerprinting, tracking pixels and similar techniques) which enable us and third parties engaged by us to recognise you when you use the website and, where applicable, to track you across multiple visits.

We use our own tools as well as, on occasion, services from third-party providers, in particular to improve the functionality or content of our website (e.g. integration of videos or maps), to compile statistics and to place advertisements. This enables us and authorised third-party providers to offer you a personalised web experience (e.g. personalised advertising, interactions on social media pages, etc.).

13.1 What are cookies and similar technologies?

A cookie is a small text file with an identifier (a sequence of letters and numbers) that is transmitted between the server and your system. This enables us and third-party providers commissioned by us or cooperating with us to recognise visitors to our website and to track them across multiple visits and different websites. Cookies enable the recognition of a specific device or browser and do not necessarily contain information that personally identifies a user. However, personal data that we or third-party providers commissioned by us store about you (e.g. if you have a user account with us or such providers) may be linked to the information stored in and derived from cookies, and thereby potentially linked to you as a person.

In addition to cookies, there are other similar technologies such as pixel tags, fingerprints and social media plug-ins. Pixel tags are small, typically invisible images or pieces of code loaded from a server that provide the server operator with certain information (e.g. access to a web page). Fingerprints consist of information collected during your visit to the website about the configuration of your device or browser, which makes it possible to distinguish your device from other devices. Social media plug-ins are small software components that establish a connection between your visit to our website and the social media platform of a third-party provider. The social media plug-in informs the third-party provider that you have visited our website and may transmit to the provider cookies that it has previously placed in your web browser. Further information about how these third-party providers use personal data collected via their social media plug-ins can be found in their respective privacy policies.

13.2 What types of cookies and similar technologies do we use?

The cookies and similar technologies that we use on our websites serve the following purposes (similar technologies are included in each case):

  • Strictly necessary cookies: Some cookies are essential for the use of the website and its features. These cookies ensure the core functionality of the website, e.g. the ability to navigate from page to page without items placed in the shopping cart disappearing. They also ensure that you remain connected to the website. These cookies have an expiry period of up to 12 months.
  • Performance and analytics cookies: Performance and analytics cookies collect information about how our website is used and enable us to carry out analyses of website usage, e.g. which pages are visited most frequently and how visitors navigate our website. These cookies are used to make visiting the website easier and faster and to improve the overall user experience and convenience. For this purpose, we use third-party analytics services. Before we deploy such cookies, we ask for your consent.
  • Marketing cookies: Marketing cookies help us and our advertising partners to display advertising on our website for offers or services that may be of interest to you, or to show our advertising when you continue browsing the internet after leaving our website, i.e. to deliver targeted advertising to you. Depending on the circumstances, these cookies have an expiry period of up to 12 months.

Details about our third-party providers and advertising partners can be found in the Consent Management Platform. The Consent Management Platform also gives you the option to deactivate certain categories of cookies by adjusting the relevant settings.

Some of the third-party providers we use may be located outside of Switzerland. Information on the disclosure of data abroad can be found in section 9.

If you consent to the use of cookies, you accept that your data may be transferred to a country that does not provide an adequate level of data protection, and you accept the risk that your data in the recipient's country may be accessible to foreign authorities that do not comply with adequate data protection provisions. You may withdraw your consent to cookies at any time as explained in section 13.3.

13.3 How can I control the use of cookies and similar technologies?

Browsers can automatically accept or reject cookies, but also allow you to change these settings. You can also disable or delete cookies that you have previously accepted. Please note that all settings will be lost if you delete all cookies, including the setting that you do not wish to accept cookies, since this in turn requires that an opt-out cookie has been set. The settings must be made separately for each browser you use. Information on how to manage cookies in your browser can be found in your browser’s help menu.

If you choose to decline cookies and similar technologies, you can still use our website; however, your access to some features and areas of our website may be restricted.

14. What data do we process on our pages in social networks? 

We may operate pages and other online presences on social networks and other platforms operated by third parties and process the data about you described in section 3 and below. We receive this data from you and the platforms when you come into contact with us via our online presence (e.g. when you communicate with us, comment on our content or visit our presence). At the same time, the platform providers may analyse your use of our online presences (e.g. the way in which you interact with us, how you use our online presences, what you view, comment on or "like") and process this data together with other data they hold about you (e.g. information about your age, gender and other demographic information). In this way they create profiles about you and compile statistics on the use of our online presences. They use this data and profiles to display our or other advertising and other personalised content on the platform and to manage behaviour on the platform, but also for market and user research and to provide information about you and the use of our online presence to us and to other parties. To the extent we are jointly responsible with the provider for certain types of processing, we will conclude an appropriate agreement with such provider. You can obtain information about the essential content of this agreement from the provider. They also process this data for their own purposes, in particular for marketing and market research purposes (e.g. for the personalisation of advertising) and for managing their platforms (e.g. to decide what content to show you), and act as separate controllers for this purpose.

We are entitled, but not obliged, to review content on our online presences before or after it is published, to delete content without notice and, where appropriate, to report it to the provider of the relevant platform. In the event of violations of rules of conduct and decency, we may also notify the provider of the platform on which the relevant user account is located with a view to blocking or deletion.

For further information on processing by the platform operators, please refer to the privacy policies of the respective platforms. There you can also find out in which countries your data is processed, what rights of access and erasure you have, and how you can exercise these rights or obtain further information. We currently use the following platforms:

15. Can this Privacy Policy be amended? 

This Privacy Policy does not form part of any contract with you. We may amend this Privacy Policy at any time. The version published on this website is the current version.

 Last update: 28. May 2026