privacy policy
PRIVACY POLICY
Last updated: April 2026
1. DATA CONTROLLER
The entity responsible for processing personal data on this website within the meaning of the revised Swiss Federal Act on Data Protection (revFADP) and the EU General Data Protection Regulation (GDPR) is:
OneGo GmbH
Büetigenstrasse 80
2557 Studen BE
Switzerland
E-mail: info@garos.ch
Website: https://garos.ch
If you have any questions about data protection, you may contact us at any time by e-mail at info@garos.ch.
2. INTRODUCTION AND SCOPE
This Privacy Policy describes how we collect, use and disclose your personal data when you use https://garos.ch (the “Website”) or make a purchase there. It is governed by the revised Swiss Federal Act on Data Protection (revFADP) and, where applicable, the EU General Data Protection Regulation (GDPR).
3. PERSONAL DATA WE COLLECT
3.1. Device information
When you visit the Website, we automatically collect certain information about your device. This includes:
- information about your web browser and operating system
- your IP address (generally shortened)
- the time zone
- cookies installed on your device
- the webpages or products you visit
- the websites or search terms that referred you to our Website
- your interactions with the Website
- the date and time of access
We refer to this automatically collected information as “Device Information”.
3.2. Technologies used to collect Device Information
- Cookies: data files stored on your device that often contain an anonymous unique identifier. Further information about cookies and how to disable them is available at allaboutcookies.org.
- Log files: files that record actions on the Website and collect data such as IP address, browser type and version, internet service provider, referring and exit pages, and date and time stamps.
- Web beacons, tags and pixels: electronic files used to collect information about how you use the Website.
3.3. Order information
When you make or attempt to make a purchase through the Website, we collect:
- your name
- billing address
- shipping address
- payment information (credit card numbers and other payment methods are processed directly by our payment service provider, and we do not have access to them)
- e-mail address
- telephone number
We refer to this information as “Order Information”.
3.4. Information from social media and advertising platforms
When you interact with our content or advertisements on platforms such as Meta (Facebook/Instagram), Google or YouTube, these platforms may collect additional data, including:
- clicks on advertisements
- likes, comments and other interactions
- demographic data based on your profile
- device identifiers and advertising IDs
4. HOW AND WHY WE USE YOUR PERSONAL DATA
4.1. Order Information
- fulfilling and processing orders (performance of a contract, Art. 31 para. 2 lit. a revFADP / Art. 6 para. 1 lit. b GDPR)
- communicating with you about your order
- fraud screening and prevention (legitimate interest)
- compliance with statutory retention obligations (e.g. accounting, Art. 958f Swiss Code of Obligations)
- marketing (only with your express consent where required by law)
4.2. Device Information
- fraud screening and Website security (legitimate interest)
- analysis and optimisation of our Website and offering (legitimate interest)
- displaying personalised advertising on third-party platforms (legitimate interest where legally permitted, or consent where required)
4.3. Information from social media and advertising platforms
- providing personalised advertisements
- analysing the effectiveness of our marketing campaigns
- optimising our content based on your interests
- reaching similar target groups (Lookalike Audiences)
5. SERVICES USED AND DISCLOSURE TO THIRD PARTIES
We use various services to operate our Website and online shop. In this context, data is transmitted to the respective service providers:
5.1. Shopify (shop system and hosting)
Our online shop is operated through Shopify Inc. (151 O'Connor St, Ottawa, ON K2P 2L8, Canada). Shopify processes your order data and provides the technical infrastructure. Further information: https://www.shopify.com/legal/privacy
5.2. Google services
We use various services provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) and/or Google LLC (USA):
- Google Analytics 4 (GA4): analysis of user behaviour on our Website. IP addresses are shortened using IP anonymisation before being transmitted.
- Google Ads Conversion Tracking: measurement of the effectiveness of our advertisements.
- Google Ads Remarketing: displaying advertisements to visitors to our Website on partner websites.
- Enhanced Conversions: we transmit hashed customer data (rendered unreadable using cryptographic methods), such as e-mail addresses, to Google to improve conversion attribution. No plain-text data is transmitted.
- Google Customer Match: creation of target groups based on hashed customer data.
- Google Merchant Center / Google Shopping: provision of our product data for Google Shopping advertisements.
Further information: https://policies.google.com/privacy
You can object to the use of cookies by Google services at https://adssettings.google.com.
5.3. Meta (Facebook/Instagram)
We use the Meta Pixel and the Conversions API provided by Meta Platforms Ireland Ltd. (4 Grand Canal Square, Dublin 2, Ireland). These tools allow us to measure the effectiveness of our advertisements on Facebook and Instagram, display remarketing advertisements and reach similar target groups. Pseudonymised data about your interactions with our Website is transmitted to Meta.
Further information: https://www.facebook.com/privacy/policy
You can disable personalised advertising at https://www.facebook.com/settings/ads.
5.4. Payment service providers
We use third-party providers to process payments (e.g. Shopify Payments, PayPal, Stripe, TWINT). Your payment data (e.g. credit card number) is transmitted directly to and processed by the relevant payment service provider. We do not have access to complete payment data.
5.5. Shipping service providers
To ship your order, we disclose your delivery and contact details to logistics service providers (e.g. Swiss Post, DHL).
5.6. E-mail delivery
For sending order confirmations and transactional e-mails, we use Shopify’s infrastructure as well as our e-mail provider Hostpoint AG (Switzerland).
6. TRANSFER OF DATA ABROAD
Some of the service providers mentioned above, particularly Google, Meta and Shopify, are based in or process data in countries outside Switzerland and the EU, particularly the United States.
These countries do not always provide a level of data protection equivalent to that of Switzerland or Europe. Transfers are made on the basis of:
- the EU-US Data Privacy Framework (for certified US companies),
- the European Commission’s Standard Contractual Clauses, supplemented by the Swiss recognition decision of the Federal Data Protection and Information Commissioner (FDPIC), or
- your express consent, where applicable.
7. BEHAVIOURAL ADVERTISING
We use your data to show you targeted advertisements that may be more relevant to you. You can disable targeted advertising as follows:
- Google: https://adssettings.google.com
- Meta: https://www.facebook.com/settings/ads
- General (EU): https://www.youronlinechoices.com
8. DO NOT TRACK
We do not currently alter our data collection and use practices when we receive a “Do Not Track” signal from your browser, as there is not yet a uniform technical standard for this.
9. YOUR RIGHTS
Regardless of your place of residence, you have the following rights regarding your personal data:
- Right of access: you may request information about the data we have stored about you.
- Right to rectification: you may request the correction of inaccurate data.
- Right to erasure: you may request the deletion of your data, provided that no statutory retention obligations prevent this.
- Restriction of processing: you may request that the processing of your data be restricted.
- Data disclosure / data portability: you may request that your data be provided in a commonly used electronic format.
- Right to object: you may object to the processing of your data, particularly for direct marketing purposes.
- Withdrawal of consent: where processing is based on your consent, you may withdraw it at any time.
To exercise your rights, contact us at info@garos.ch. Information is generally provided free of charge and usually within 30 days.
If you believe that your data is being processed unlawfully, you may lodge a complaint with the competent supervisory authority:
- Switzerland: Federal Data Protection and Information Commissioner (FDPIC), www.edoeb.admin.ch
- EU/EEA: the national data protection authority responsible for you
10. DATA RETENTION
We retain your data only for as long as necessary for the purposes stated above or for as long as statutory retention obligations apply:
- Order data: 10 years in accordance with Art. 958f of the Swiss Code of Obligations (accounting records and supporting documents)
- Customer account data: until the account is deleted
- Website analytics data: generally 14 months (GA4 default setting)
- Customer support communications: up to 3 years after the last communication
11. DATA SECURITY
We use appropriate technical and organisational measures to protect your data, including SSL/TLS encryption of data transmission, access controls and regular security updates.
12. MINORS
Our Website is not intended for children under the age of 16. We do not knowingly collect personal data from minors under the age of 16. If you become aware that a child under the age of 16 has provided us with personal data, please contact us so that we can delete that data.
13. CHANGES TO THIS PRIVACY POLICY
We may amend this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal or regulatory reasons. The current version can always be found on this page.
14. CONTACT
If you have any questions about data protection, exercising your rights or this Privacy Policy, please contact us at:
OneGo GmbH
Büetigenstrasse 80
2557 Studen BE
E-mail: info@garos.ch