Privacy Policy
PRIVACY NOTICE FOR DIGITAL SERVICES
This Privacy Notice describes which of your personal data are collected by Tristate International SA and its affiliated entities (collectively, “We”, “Us”, “Our”), for what purposes and how they are processed in relation to the online store (the “Store”)
Below you will also find the information you need to exercise your rights under the applicable data protection regulations, such as the Swiss Data Protection Act, the EU Regulation 679/2016 (“GDPR”) and UK General Data Protection Regulation (“UK GDPR”) (the “Applicable Data Protection Regulations”).
1. Who processes your data: Data Controllers and Joint Controllers
Depending on the services used, your personal data is processed by:
• Tristate International SA, Via Canova 9, Lugano (Switzerland),
• Tristate Digital SA, Via Canova 9, Lugano (Switzerland)
as Joint Controllers and/or Data Controller depending on the processing activity.
2. Which data we process - Type of processed data
We may process:
a) Contact and identification data: such as your first name, surname, email address, telephone number, residential address, country of residence, language, date of birth, gender, and, where applicable, identification details and preferred store
b) Purchase and transactional data: such as information relating to your purchases (including date, amount, products purchased), order details, returns, participation in promotions or contests, as well as information related to your account.
c) Payment and invoicing data: such as billing address and payment details (including credit card information or other payment instruments) necessary to process your orders and manage related administrative and accounting obligations.
d) Browsing and behavioral data: such as information relating to your interaction with our digital services, including IP address, device identifiers, browsing activity, pages visited and interactions, also collected through cookies and similar technologies, including data used for analytics and advertising purposes.
e) Product-related data: such as product codes, description of the product, details relating to purchased or owned products, requests for assistance, description of reported issues, and any information necessary to provide after-sales services, return and related customer support activities.
3. Where do we get your data - Data collection methods
Your personal data is collected through the following methods:
a) Directly from you: for example when you create an account, make a purchase on the Store, request after-sales services, contact customer care, subscribe to newsletters, participate in surveys, contests or promotions, or otherwise provide your data by filling in forms.
b) Through the use of digital services: when you interact with our online channels, including the Store and dedicated platforms, we may automatically collect certain information through cookies and similar technologies, including data relating to your browsing activities, device, and interactions with our websites and communications.
c) In connection with the services you request: including when you request, after-sales or customer support services, by providing information relating to your product and your request (e.g. product details, description of issues, delivery and return information).
d) From third parties indicated by you: for example, when you provide us with personal data of third parties (such as delivery recipients), you acknowledge that you are responsible for ensuring that such data have been collected and shared in compliance with applicable law.
4. Why we process your data and the related legal basis
We process your personal data for the following purposes:
a) Contractual and service-related purposes: to help you create and manage your account, complete your purchases on the Store, receive customer care and after-sales support, and access to maintenance services (such as product collection and return). For these activities, we process your personal data as necessary to perform a contract with you. We may also use your data to keep you updated on things that are relevant to your shopping experience, such as notifying you when a product becomes available, where this is necessary to provide the service you requested, and reminding you about items left in your shopping cart, based on our legitimate interest in facilitating your purchase experience and improving our services.
b) Administrative, accounting and legal purposes: to comply with obligations arising from applicable laws and regulations (including tax, accounting and reporting obligations), to manage administrative processes connected to our business activities, and to prevent fraud, unlawful conduct or misuse of our services, as well as to protect and enforce our rights. For these purposes, we process your personal data where necessary to comply with a legal obligation to which we are subject and, where applicable, on the basis of our legitimate interest in safeguarding our business and preventing misuse of our services.
c) Customer care and support purposes: to handle your requests, provide assistance through customer service channels, respond to inquiries (including product availability or service-related requests), and manage interactions related to purchases, services or accounts. For these purposes, we process your personal data as necessary to perform a contract with you or to take steps at your request prior to entering into a contract and, where applicable, on the basis of our legitimate interest in ensuring an effective and high-quality customer support service.
d) Marketing purposes: To send you newsletters, promotional communications and information about products, services, initiatives or events offered by the Tristate International SA, through email or other communication channels (e.g. whatsapp), subject to your prior consent where required by applicable law.
e) Profiling and personalization purposes: to analyze your preferences, purchase history and interactions with our services in order to better understand your interests and provide you with personalized communications and offers, including through automated processing activities (profiling), subject to your consent where required by applicable law or based on legitimate interest where permitted.
f) Soft spam purposes (existing customers): to send you communications relating to products and services similar to those you have previously purchased or requested, using the contact details collected in the context of a sale or negotiations for a sale, in accordance with applicable data protection and electronic communications laws. Such communications will concern our own products and services and will be sent only where you were duly informed of this use at the time of data collection and were given the opportunity to object. You may object at any time, including through the opt-out mechanism provided in each communication.
g) Behavioral advertising and retargeting purposes: to display advertisements relating to our products and services based on your browsing behavior, interactions with our digital platforms and inferred preferences, including cookies, pixels and similar technologies, and to deliver targeted advertising across digital channels, subject to your consent where required.
h) Market research and consumer analytics purposes: to carry out statistical analyses, customer satisfaction surveys and market research activities, including the analysis of purchasing behavior, preferences and trends, in order to improve our products, services and commercial strategies, in aggregated form or, where necessary, identifiable form, based on your consent or our legitimate interest, as applicable.
i) Service quality and feedback purposes: to send you surveys and collect feedback regarding your experience with our products and services (including post-purchase), in order to improve our offering, subject to your consent where required.
5. Nature of the provision of personal data
The provision of your personal data is:
a) Necessary for the provision of core services: such as the creation and management of your account, the purchase of products on the Store, access to customer care and after-sales services and the fulfillment of related administrative, accounting and legal obligations. Failure to provide such data may result in the impossibility of accessing or using this service.
b) Optional for marketing and profiling purposes: such as receiving promotional communications, newsletters, personalized offers, and participating in surveys or feedback activities. Refusal to provide such data or to give your consent will not affect your ability to access core services. You may withdraw your consent at any time, without affecting the lawfulness of processing carried out prior to such withdrawal.
6. Data retention
Your personal data will be retained for periods that are proportionate to the purposes for which they are processed and in accordance with applicable data protection laws. In particular:
a) Account and service-related data are retained for the entire duration of your account and, in any case, may be deactivated after a defined period of inactivity (e.g. 24 months from your last interaction), as well as for the time necessary to provide you with the requested services (including purchases, customer care, and after-sales services).
b) Marketing data (e.g. for sending newsletters and promotional communications) are retained for a period of up to 24 months from their collection, unless you withdraw your consent earlier.
c) Soft spam data (existing customers) are retained for a period of up to 24 months from the last purchase, unless you object to this processing.
d) Profiling, personalization data and behavioral advertising are retained for a period of up to 12 months from their collection, unless you withdraw your consent earlier.
e) Data processed for administrative, accounting and legal purposes may be retained for longer periods, where required by applicable laws and regulations (e.g. tax and accounting obligations).
f) Data related to after-sales services are retained for the time strictly necessary to provide the requested service and to manage any related requests, as well as for any additional period necessary to protect our rights in case of disputes.
7. Where your data are processed – Data transfers
Your personal data may be processed and stored at the premises and IT systems of the Data Controllers and their service providers, located within the European Union, Switzerland, UK and, where applicable, in countries outside these jurisdictions.
In particular:
a) Personal data are primarily processed within the EU and Switzerland, where the Data Controllers and their main service providers are established.
b) In certain cases, your data may be transferred to and processed in countries outside the EU/Switzerland, including where our service providers, IT infrastructure providers, logistics partners or other entities involved in the provision of our services (including e-commerce, customer care services) are located.
c) Any such transfers will be carried out in compliance with the Applicable Data Protection Regulations and subject to appropriate safeguards, including:
- adequacy decisions issued by the competent authorities (e.g. the European Commission), or
- appropriate safeguards such as standard contractual clauses, binding corporate rules or other mechanisms provided for under applicable law.
You may request further information on transfer mechanisms and obtain a copy of the safeguards adopted by contacting us at privacy@eu.tristateww.com
8. Who we share your data with – Recipients
Your personal data may be shared with the following categories of recipients, in accordance with applicable data protection laws:
a) Service providers: such as IT service providers, hosting providers, platforms managing the Store and digital services, customer care providers, marketing and profiling service providers, as well as consultants (e.g. legal, tax and accounting), who process personal data on our behalf as data processors under appropriate contractual arrangements including advertising networks and analytics providers.
b) Advertising networks and platforms: third-party providers that support the delivery, management and measurement of advertising campaigns across digital channels (e.g. social media platforms, search engines and advertising networks). These entities may process personal data such as online identifiers, browsing data and interaction data, collected through cookies, pixels and similar technologies, in order to display targeted advertisements, perform retargeting activities and measure the effectiveness of advertising campaigns, in accordance with your preferences and the choices expressed through our consent management tools.
c) Group companies: including companies belonging to Tristate’s group, and selected distributors or partners, which may process your data in order to provide you with integrated services and a consistent customer experience across online and offline channels (e.g. account management and purchase history sharing).
d) Payment service providers and banking institutions: for the management of payments, transactions and related financial operations, where applicable.
e) Public authorities and third parties if required by law: including administrative authorities, judicial authorities or other entities, where disclosure is necessary to comply with legal obligations, prevent unlawful activities, or protect and enforce our rights or the rights of third parties.
f) Other recipients in the context of corporate transactions: such as legal advisors or consultants, in case of extraordinary transactions (e.g. mergers, acquisitions or reorganizations), in compliance with applicable law..
9. Minors
Our services, including the Store and after-sales services, are not intended for individuals under 18 years of age, but rather for adults.
If you are a parent or legal guardian and you believe that a minor has provided us with personal data, you may contact us at any time using the contact details indicated in this Privacy Policy. We will take appropriate steps to verify the situation and, where necessary, promptly delete such data in accordance with applicable data protection laws.
10. Your rights
You may at any time exercise your rights under the Applicable Data Protection Regulations, including the right to obtain confirmation as to whether or not your personal data are being processed and, where that is the case, to access such data and verify their origin and accuracy.
In particular, you have the right to:
a) Request the rectification or update of inaccurate or incomplete personal data.
b) Request the erasure of your personal data.
c) Request the processing restriction under certain circumstances.
d) Object, in whole or in part, to the processing of your personal data, including for marketing purposes.
e) Request the portability of your personal data, where applicable.
f) Withdraw any consent you may have given at any time, without affecting the lawfulness of processing carried out prior to such withdrawal.
You also have the right to lodge a complaint with the competent supervisory authority in accordance with applicable data protection laws.
To exercise your rights or request further information, you may contact us at: privacy@eu.tristateww.com
11. Updates
We may update this Privacy Policy from time to time in order to reflect changes in applicable laws or regulations, as well as to consider modifications to our services, processing activities or internal organizational structure.
In case of material changes, we will provide appropriate notice for you, where required by applicable law, for example through our website or other communication channels. The updated version of the Privacy Notice will be made available on our digital platforms and will indicate the date of the latest revision.
We encourage you to periodically review this Privacy Notice to stay informed about how we process your personal data.
-
Last update of the current Privacy Notice on 30/06/2026