This Privacy Policy explains how Lignera ("we", "us", "our") collects, uses, and protects your personal data when you visit eulignera.com (the "Website"). We are committed to complying with the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR) and the ePrivacy Directive.
1. Data Controller
LIGNOR AG
Brambergstrasse 16, Neuenegg, Switzerland
Email: privacy@eulignera.com
We are the data controller for the personal data processed through this Website.
2. Personal Data We Collect
- Contact data: email address, phone number, first and last name when you place an order or contact us.
- Delivery data: shipping address, postal code, city, country.
- Order data: product selections, order history, payment metadata (we do not store full card numbers).
- Usage data: IP address, browser type, pages visited, referring URLs, time on page (collected via cookies, see our Cookie Policy).
- Consent data: your cookie preferences and consent timestamp.
3. Legal Basis for Processing
- Contract performance (Art. 6(1)(b) GDPR): processing your order, delivery, and customer support.
- Legal obligation (Art. 6(1)(c) GDPR): retaining invoices and tax records as required by EU/Swiss law.
- Legitimate interests (Art. 6(1)(f) GDPR): website security, fraud prevention, and basic analytics.
- Consent (Art. 6(1)(a) GDPR): marketing cookies, advertising personalization, and conversion tracking. You can withdraw consent at any time.
4. How We Use Your Data
- Processing and shipping your orders.
- Sending order confirmations and delivery updates.
- Customer support and warranty claims.
- Analyzing website traffic and user behavior (only with your consent).
- Showing personalized advertising on Google, Meta (Facebook/Instagram), and other platforms (only with your consent).
- Measuring advertising effectiveness through conversion tracking (only with your consent).
5. Advertising and Third-Party Services
We use the following advertising and analytics services. These services only activate after you give explicit consent via our cookie banner:
- Google Ads & Google Analytics 4: Conversion tracking, remarketing audiences, and website analytics. Google processes data under its role as a processor. See Google's Privacy Policy.
- Meta (Facebook/Instagram) Pixel: Conversion tracking and audience building for Meta ad campaigns. See Meta's Privacy Policy.
- Stripe: Payment processing. Stripe processes card data directly on its own servers. We never see or store your full card number. See Stripe's Privacy Policy.
We use Google Consent Mode v2 to ensure that Google tags only process data after you have granted consent for the relevant category.
6. Data Retention
Order data is retained for 10 years (legal tax requirement in Switzerland). Analytics and marketing data is retained for up to 26 months. You can request deletion of your personal data at any time, subject to legal retention requirements.
7. Data Sharing
We share personal data with the following categories of recipients:
- Shipping carriers: DHL, DPD, or national postal services for delivery.
- Payment processor: Stripe for payment handling.
- Advertising platforms: Google and Meta (only with your consent).
- Email service: for sending order confirmations.
We do not sell your personal data to any third party. We do not transfer data outside the EU/EEA, except to advertising platforms that provide appropriate safeguards (Standard Contractual Clauses).
8. Your Rights Under GDPR
- Right of access: request a copy of your personal data.
- Right to rectification: correct inaccurate or incomplete data.
- Right to erasure ("right to be forgotten"): request deletion of your data.
- Right to restrict processing: limit how we use your data.
- Right to data portability: receive your data in a structured format.
- Right to object: to processing based on legitimate interests or for direct marketing.
- Right to withdraw consent: at any time, without affecting the lawfulness of prior processing.
To exercise any of these rights, email privacy@eulignera.com. You also have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) at www.ada.lt.
9. Cookies
We use cookies for essential functionality, analytics, and marketing. See our Cookie Policy for details. You can manage your cookie preferences at any time via the cookie banner or the preferences button in the footer.
10. Security
We implement appropriate technical and organizational measures to protect your personal data, including TLS encryption for data in transit, secure storage for data at rest, and access controls. Payment data is handled exclusively by Stripe, which is PCI DSS Level 1 certified.
11. Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting a notice on the Website.