Privacy policy

Controller

The controller responsible for the processing of personal data is:

horntools International GmbH
Grabenstrasse 11D
6340 Baar
Switzerland

Email: info@horntools.com

We are delighted that you are interested in our online shop. Protecting your privacy is important to us. Below, we inform you about which personal data we process, for what purposes, and what rights you have.

The processing of personal data takes place in particular in accordance with the Swiss Federal Act on Data Protection (FADP) and the Data Protection Ordinance (DPO), as well as other applicable data protection provisions.

Access Data and Hosting

You can generally visit our website without actively providing any information about yourself.

Whenever you visit our website, certain data is automatically collected for technical reasons and stored in what are known as server log files. This can include, in particular, the following data:

  • IP address
  • date and time of access
  • pages and files accessed
  • amount of data transferred
  • browser and device information
  • referrer URL
  • requesting provider

We process this data in order to ensure secure and smooth operation of our website, to detect errors, and to optimize our offering from a technical standpoint.

Hosting by Shopify

Our online shop is operated via the Shopify platform.

The provider for merchants in Switzerland is generally:

Shopify International Limited
Victoria Buildings, 2nd Floor
1–2 Haddington Road
Dublin 4, D04 XN32
Ireland

Shopify provides us in particular with the technical infrastructure and hosting, shop, order, and administration functions, and in doing so processes personal data on our behalf or, in part, under its own responsibility.

Personal data of customers from Switzerland is initially processed by Shopify International Limited in Ireland. In the course of providing the Shopify services, data may also be processed by other Shopify group companies and subprocessors, in particular in Canada and the USA.

For data transfers to countries without an adequate level of data protection recognized by the Swiss Federal Council, appropriate safeguards are used, in particular recognized standard data protection clauses or other data protection mechanisms permitted under data protection law.

You can find further information on the processing of data by Shopify in Shopify's privacy policy.

Collection and Use of Data for Contract Performance and Customer Accounts

We collect personal data when you provide it to us, in particular in connection with an order, when creating a customer account, or when contacting us, for example by email or via the contact form.

This can include, in particular:

  • first and last name
  • billing and delivery address
  • email address
  • telephone number
  • order and invoice data
  • payment information
  • customer account and login data
  • content of your messages and inquiries

Mandatory fields are marked accordingly. Without the information requested there, it may not be possible to process an order or the respective inquiry.

We use this data in particular for:

  • processing your order
  • delivery of the ordered goods
  • payment processing
  • handling returns and complaints
  • customer communication
  • managing your customer account
  • fulfilling legal obligations

If you create a customer account, you can, among other things, manage various shipping addresses, track orders, view your order history, submit product reviews, and use other shop functions there.

You can request the deletion of your customer account at any time via the function provided for this purpose or by sending us a message.

Data that is still required due to statutory retention obligations is only deleted once the relevant retention periods have expired. Accounting and business-relevant records are generally retained in Switzerland for ten years.

Data Processing in Connection with Our Returns Function

If you make use of our voluntary right of return via the online returns function in the shop, we process the data you provide in the relevant form.

This includes, in particular:

  • first and last name
  • order or invoice number
  • email address
  • further information that you provide to us in connection with your return

We need this information in order to match your return to an order, process your request, communicate with you, and carry out the return process.

For the technical provision of the returns function, we may use service providers who process personal data on our behalf.

The data collected in connection with a return is only retained for as long as is necessary to process the return and to fulfill statutory retention and documentation obligations.

Disclosure of Data for Contract Performance

To the extent necessary for the processing of your order, we disclose personal data to the shipping and logistics companies engaged to deliver your order.

This includes, in particular:

  • name
  • delivery address
  • telephone number, where applicable
  • email address, where applicable
  • order information required for delivery

The same applies to manufacturers, suppliers, or wholesalers where they ship an order directly to you on our behalf.

Payment Processing

For payment processing, we use external payment service providers depending on the payment method selected at checkout.

This includes, in particular:

Shopify Payments

Shopify Payments is a payment service provided by Shopify. Depending on country, currency, and availability, it can be used to process credit and debit cards as well as local payment methods such as TWINT.

The data required for payment processing is processed by Shopify or by the payment service providers involved.

PayPal

PayPal is offered by:

PayPal (Europe) S.à r.l. et Cie, S.C.A.
22–24 Boulevard Royal
L-2449 Luxembourg

PayPal processes the personal data required to carry out the payment under its own responsibility.

Other Payment Service Providers

Depending on the payment methods activated in the shop, further payment providers may be used. Which payment methods are available is shown to you at checkout.

In the course of payment processing, in particular name, billing address, payment amount, and, depending on the payment method, further payment, account, or creditworthiness information is processed.

The privacy policy of the respective payment service provider applies in addition to the processing of data by that provider.

Disclosure of Data to Shipping Service Providers

To the extent necessary for delivery or delivery notifications, or where you have given us your consent for this purpose, we may disclose your email address and telephone number to the respective shipping service provider.

The shipping service provider may use this data in particular to inform you about the status of the delivery or to coordinate the delivery with you.

Affiliate Marketing with UpPromote

We operate a partner program via the service:

UpPromote: Affiliate Marketing
SECOMUS TECHNOLOGY JOINT STOCK COMPANY (Secomapp)
Home City, Tầng 4, Toà V4
177 Trung Kính, Yên Hòa
Hà Nội 100000
Vietnam

If you reach our website via an affiliate link, cookies or comparable technologies may be used to match a subsequent order to the respective affiliate partner.

In doing so, in particular the following data may be processed:

  • pseudonymous identification numbers
  • referrer information
  • information about the website visit
  • information about an order resulting from it

We activate non-essential affiliate tracking only after your consent, in accordance with our cookie settings.

As personal data may be transferred to Vietnam in this context, we ensure the protection of the data through appropriate contractual safeguards, in particular standard data protection clauses recognized by the FDPIC or otherwise permitted under Swiss data protection law, and, where applicable, supplementary protective measures.

If you register yourself as an affiliate partner, we additionally process the data you provide, for example name, email address, and payment or bank information, in order to manage the partner relationship and to pay out commissions.

Email Newsletter

If you sign up for our newsletter, we use your email address and, where applicable, further information you provide voluntarily, in order to send you information about our products, promotions, and offers.

The newsletter is sent on the basis of your consent.

You can unsubscribe from the newsletter at any time using the unsubscribe link included in every newsletter or by sending us a message.

Klaviyo

We use the following service to send and evaluate our newsletters:

Klaviyo, Inc.
USA

In this context, Klaviyo processes in particular your email address as well as information relating to the delivery of and interaction with our emails.

Data may be processed in the USA in this context.

To the extent the recipient in question is certified under the Swiss-U.S. Data Privacy Framework, a data transfer may take place on the basis of this adequacy framework. Otherwise, appropriate safeguards are used, in particular recognized standard data protection clauses and, where applicable, supplementary protective measures.

Cookies and Similar Technologies

We use cookies and similar technologies on our website.

Cookies are small files that are stored on your device or that can read out information from your device.

We distinguish in particular between:

  • technically necessary cookies
  • functional cookies
  • analytics cookies
  • marketing and tracking cookies

Technically necessary cookies are required so that the shop and the functions you request work properly. These include, for example, shopping cart, login, security, and language settings.

Non-essential analytics, marketing, and tracking technologies are, based on our technical configuration, generally only activated after your consent via our cookie banner.

You can change your selection at any time via the cookie settings or withdraw a consent you have given with effect for the future.

To the extent that the use of cookies or similar technologies constitutes high-risk profiling or another form of processing for which explicit consent is required under Swiss data protection law, we obtain this consent before carrying out the relevant processing.

In addition, you can set your browser so that cookies are blocked or deleted. Blocking all cookies may result in certain functions of our shop no longer working, or working only to a limited extent.

Consentmo

To manage your cookie and privacy preferences, we use Consentmo provided by:

iSense Ltd.
4 Prof. Georgi Bradistilov St.
Entrance A, 4th floor
1700 Sofia
Bulgaria

Consentmo processes in particular technical information such as your IP address, the time of your selection, and your stored consent settings.

This processing serves to implement your cookie settings and to document your decision.

Web Analytics and Online Marketing

The following analytics, marketing, and third-party services are — to the extent they are not technically necessary — only activated after your consent, in accordance with our cookie configuration.

Google Analytics 4

We use Google Analytics 4 to analyze the use of our website.

The provider is:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

or Google LLC in the USA.

Google Analytics can process in particular the following information:

  • IP address
  • browser and device information
  • pages accessed
  • time and duration of the visit
  • interactions with our website
  • approximate location information
  • source of the website visit

The IP address is shortened or processed in a privacy-friendly manner to the extent provided for.

The retention period configured with us for event and user data is up to 14 months.

Data may also be processed in the USA. For such transfers, the safeguards required under Swiss data protection law are used, in particular the Swiss-U.S. Data Privacy Framework for correspondingly certified recipients, or appropriate contractual safeguards.

Hotjar

We use Hotjar to analyze user behavior on our website.

The provider is:

Hotjar Ltd.
Level 2, St Julian's Business Centre
3 Elia Zammit Street
St Julian's STJ 1000
Malta

Hotjar is part of the Contentsquare group.

Hotjar can, for example, be used to evaluate heatmaps, click and scroll behavior, and — where activated — session recordings and surveys.

In doing so, in particular shortened IP addresses, device and browser information, as well as information about the interaction with our website may be processed.

Hotjar is only activated after your corresponding consent.

Further information can be found at:
https://www.hotjar.com/legal/policies/privacy/

Google Ads and Remarketing

We use Google Ads to advertise our offerings on Google Search and on third-party websites or platforms, and to measure the success of our advertising activities.

Cookies and similar technologies may be used in this context in particular to:

  • measure advertisements
  • record conversions
  • form user groups for advertising purposes
  • display interest-based advertising

enable this.

The provider is Google Ireland Limited or Google LLC.

Google Ads and Remarketing are only activated after your consent, in accordance with our cookie configuration.

Data may be transferred to the USA. The safeguards described above apply to these transfers.

You can change your settings at any time via our cookie settings as well as via the advertising settings of your Google account.

Meta Pixel – Facebook and Instagram

We use the Meta Pixel of:

Meta Platforms Ireland Limited
4 Grand Canal Square
Grand Canal Harbour
Dublin 2
Ireland

or Meta Platforms, Inc. in the USA.

The Meta Pixel enables us in particular to track whether users carry out certain actions on our website after clicking on a Facebook or Instagram advertisement.

In addition, it can be used to form audiences for advertising purposes.

In doing so, in particular the following data may be processed:

  • IP address
  • browser and device information
  • pages accessed
  • interactions with our website
  • information about orders and conversions

The Meta Pixel is only activated after your consent, in accordance with our cookie configuration.

Data may also be processed in the USA in this context. For such transfers, the safeguards required under Swiss data protection law are used.

Further information can be found in Meta's privacy policy:
https://www.facebook.com/privacy/policy/

Google Maps

We may use Google Maps to visually display geographic information.

The provider is Google Ireland Limited or Google LLC.

When Google Maps is loaded, in particular your IP address, device information, and, where applicable, location information may be processed and transmitted to Google.

Google Maps is only loaded after your selection in the cookie settings, to the extent that corresponding consent is required or technically provided for.

Further information:
https://policies.google.com/privacy

Google reCAPTCHA

To protect our website and our forms against spam, bots, and misuse, we may use Google reCAPTCHA.

The provider is Google Ireland Limited or Google LLC.

To detect automated access, in particular the following information may be analyzed:

  • IP address
  • browser and device information
  • time and duration of the access
  • interactions with the website
  • technical usage information

This processing serves to protect our website, our systems, and our users against misuse.

To the extent that non-essential cookies or comparable tracking technologies are used in this context, our cookie settings apply.

Google Tag Manager

We use Google Tag Manager provided by Google Ireland Limited.

Google Tag Manager is a tag management system through which we can centrally manage various analytics, marketing, and website services.

Google Analytics, Google Ads, the Meta Pixel, or other services can, for example, be controlled via Tag Manager.

Google Tag Manager primarily serves the technical management of such tags. Any non-essential analytics or marketing services integrated via it are only activated in accordance with your cookie selection.

When Google Tag Manager is technically loaded, connection data such as the IP address and browser information may be transmitted to Google.

Further information on data protection at Google:
https://policies.google.com/privacy

Information on how Google uses personal data in connection with integrated business services can also be found at:
https://business.safety.google/privacy/

Fonts

To ensure a consistent appearance of our website, fonts are embedded either locally or via our own shop infrastructure.

To the extent that fonts are provided locally, no separate connection to external font providers such as Google Fonts is made for this purpose.

Judge.me – Product Reviews

We use the review service Judge.me.

The provider is:

Judge.me Ltd.
c/o Buckworths
2nd Floor
1–3 Worship Street
London EC2A 2AB
United Kingdom

Judge.me enables our customers to write and display product reviews.

In doing so, in particular the following data may be processed:

  • name
  • email address
  • order number
  • order date
  • review text
  • review images, where applicable
  • IP address and technical data for verifying a review

We may review submitted reviews and, where applicable, decline to publish or remove them if, for example, they contain unlawful, offensive, or clearly off-topic content, disclose personal data of third parties, or cannot plausibly be matched to an order.

Review Reminders

If you have consented to a review reminder, we may transmit your email address and order information to Judge.me so that you can be sent an invitation to review the product after your purchase.

You can withdraw such consent at any time with effect for the future.

Processing of Data Abroad

Judge.me may also use its technical infrastructure or service providers outside of Switzerland, in particular in the United Kingdom and in the USA.

Where necessary, data transfers are safeguarded by an adequacy decision of the Swiss Federal Council, the Swiss-U.S. Data Privacy Framework for correspondingly certified recipients, or appropriate contractual safeguards.

Further information:
https://judge.me/privacy

HubSpot Live Chat

We use the live chat service provided by HubSpot.

The provider is:

HubSpot Ireland Limited
One Sir John Rogerson's Quay
Dublin 2
Ireland

Via the live chat, you can contact us directly.

In doing so, in particular the following data may be processed:

  • content of your chat messages
  • name provided voluntarily
  • email address
  • IP address
  • browser and device information
  • information about the website visit

HubSpot may use cookies or similar technologies to match a chat history to your visit.

To the extent such cookies are not technically necessary, they are activated in accordance with your cookie selection.

If you use the chat to make an inquiry about an order, a possible purchase, or a support matter, we use the information you provide to process this inquiry.

HubSpot may process personal data on servers in the European Union and in the USA. For transfers to the USA, the safeguards required under Swiss data protection law are used.

Further information:
https://legal.hubspot.com/privacy-policy

HubSpot Forms

We also use forms provided by HubSpot for contact requests, newsletter sign-ups, and other inquiries.

In doing so, in particular the following data may be processed:

  • name
  • email address
  • telephone number
  • company
  • content of your message
  • IP address
  • device and browser information

Which data is specifically collected depends on the respective form.

HubSpot may combine form submissions with further information about the use of our website, to the extent you have consented to the corresponding analytics or tracking function.

The data may be processed in the EU as well as in the USA. The safeguards described above apply to data transfers to the USA.

Further information:
https://legal.hubspot.com/privacy-policy

Social Media Plugins and Embedded Content

Our website may include content and features from social networks or platforms, in particular from:

  • Facebook
  • Instagram
  • X
  • Pinterest
  • YouTube

To the extent that such an integration establishes a direct connection to a third-party provider and is not technically necessary, it is only activated after your consent, in accordance with our cookie configuration.

Once activated, the respective provider may receive information that you have visited our website.

If you are logged in with the respective provider, that provider may associate your website visit with your user account, where applicable.

Further information can be found in the privacy policies of the respective providers:

YouTube Videos

We may embed videos from YouTube on our website.

The provider is Google Ireland Limited or Google LLC.

YouTube content is only loaded after your consent or active approval, in accordance with our cookie configuration.

If you activate or play an embedded video, information about your visit and your interaction may be transmitted to Google or YouTube.

Our Presence on Social Networks

We maintain profiles on social networks and platforms in order to communicate with customers and other interested parties and to inform them about our products, offers, and promotions.

When you visit our profiles, personal data is processed by the respective platform operator.

In doing so, user profiles may be created in particular, and information may be used for analytics, market research, and advertising purposes.

The respective platform operator's own privacy policy applies to the processing of data by that operator.

Disclosure of Personal Data Abroad

In connection with the use of our website and the services described above, personal data may also be processed outside of Switzerland.

Depending on the service used, this concerns in particular countries of the European Union or the European Economic Area, the United Kingdom, Canada, the USA, and Vietnam.

Personal data is generally transferred to countries for which the Swiss Federal Council has determined an adequate level of data protection.

If no corresponding adequacy decision exists for a recipient country, we take appropriate protective measures in particular through the use of:

  • recognized standard data protection clauses
  • binding corporate data protection rules
  • other legally recognized safeguards
  • supplementary technical and organizational measures, where applicable

to ensure an adequate level of data protection.

For transfers to correspondingly certified companies in the USA, the Swiss-U.S. Data Privacy Framework may in particular serve as a basis for an adequate level of data protection.

In legally provided exceptional cases, personal data may also be disclosed abroad on another basis permitted under the FADP.

Retention Period

We generally only store personal data for as long as is necessary for the respective purpose or as required by statutory retention obligations.

Data relating to orders, invoices, and accounting-relevant business transactions must generally be retained in Switzerland for ten years.

Other data is deleted or anonymized as soon as it is no longer required for the respective purpose and there are no legal or legitimate grounds for further retention.

Consents and their withdrawal may be stored for the period necessary to be able to demonstrate compliance with data protection obligations.

Data Security

We take appropriate technical and organizational security measures to protect personal data against loss, misuse, unauthorized access, alteration, or unauthorized disclosure.

Our security measures are reviewed and adapted in line with technical developments and existing risks.

However, completely risk-free data transmission or data storage cannot be guaranteed, in particular when using the internet.

Your Rights

Under Swiss data protection law, depending on the statutory requirements, you have in particular the following rights:

  • Right to information: You can request information as to whether and which personal data we process about you.

  • Rectification: You can request the rectification of inaccurate or incomplete personal data.

  • Erasure: Subject to the statutory requirements, you can request the erasure or destruction of your personal data.

  • Restriction or discontinuation: Subject to the statutory requirements, you can request that a particular processing activity be discontinued, restricted, or terminated.

  • Objection: Subject to the statutory requirements, you can object to a processing activity.

  • Data portability: To the extent the statutory requirements are met, you can request the disclosure of certain personal data in a common electronic format or its transfer to another controller.

  • Withdrawal of consent: You can withdraw a consent you have given at any time with effect for the future.

Statutory retention obligations and other legally permitted grounds may mean that certain data must continue to be retained despite a request for erasure or an objection.

To exercise your rights, you can contact us at the following address:

horntools International GmbH
Grabenstrasse 11D
6340 Baar
Switzerland

Email: info@horntools.com

We may request suitable proof of identity where this is necessary to ensure that personal data is not disclosed to unauthorized third parties.

Supervisory Authority

If you believe that the processing of your personal data violates Swiss data protection law, you can contact:

Federal Data Protection and Information Commissioner (FDPIC)
Feldeggweg 1
3003 Bern
Switzerland

in this regard.

We recommend that you first contact us directly with any questions or complaints so that we can review your concern.

Objection to Direct Marketing

If we use your personal data for direct marketing, you can object to this use at any time.

For email newsletters, you can in particular use the unsubscribe link contained in the respective message.

After your objection, we will no longer use your data for the relevant direct marketing purpose, unless another legally permitted processing activity is required.

Changes to This Privacy Policy

We may update this privacy policy if our data processing activities, the services we use, or the legal requirements change.

The version published on our website at any given time applies.

Last updated: September 8, 2026