Terms and Conditions - Privacy Policy


Tomy Klou online store
Willenhofstrasse 3
8182 Hochfelden-ZH
Switzerland / Switzerland
Commercial register number: CHE-414.558.279
Phone: +41 78 625 82 70


This privacy policy applies to the processing of personal data of customers who place orders or who create orders. All data are in accordance with
Data Protection Regulation (GDPR) processed.
What personal data do we process and why?

tomyklou.gr (R.S-switzerland) processes your personal data because you use our services. We use the following personal data for the following purposes.

1. Ordering process

We process the personal data that you transmit to us when you place your order. This personal information is required for processing your order, confirming your order and evaluating your order, payment and possible refund. The legal basis for this processing of personal data is that this is necessary for the fulfillment of the contract within the meaning of the GCC. We process the following personal data during the ordering process:


address data

contact information

Order details

payment details

Comments (if any)

2. Product Comments

In addition to the processing activities listed above, we process the personal data that you provide when submitting a product review. The legal basis for this processing of personal data is that you have consented to this processing (publication of a product review) in accordance with the GCC. You can withdraw your consent by contacting us at info@tomyklou.gr. to contact. We process the following personal information when you submit a product review:

Name (if transferred)

Rating, including comments (if any)

3. Customer Service

When you contact our customer service, we use the personal information you provide to answer your question or handle your complaint. The legal basis for this processing of personal data is that this is necessary for the fulfillment of the contract within the meaning of the GCC. We process the following personal data for customer service purposes:


Address details (if available)

contact information

Order details

Payment details (if available)

Comments (if any)

4. Customer Satisfaction Surveys

To ensure that our services are tailored to your preferences, the personal information you submit to our customer service department may be used for activities such as customer satisfaction surveys. The legal basis for this processing activity is that a legitimate tomyklou.gr (R.S-switzerland) interest (customer satisfaction) within the meaning of the GDPR must be pursued. This applies to the same personal data as stated in number 2

5. Marketing Communications

We also process your personal data in order to send you (personalized) marketing announcements and notifications. These communications include the latest news, discounts and updates for new products (via email or push notification) and loyalty programs, regardless of the format in which we distribute these types of communications (including email or push notification). The legal basis for this processing of personal data within the meaning of the GCC is that you gave your consent when you placed the order. If you would like to change your preferences for receiving such announcements and notifications, you can unsubscribe using the link in this marketing communication.

We process the following personal data for marketing purposes:


contact information

postal code


We also process personal data that you pass on to us indirectly. tomyklou.gr (R.S-switzerland) uses cookies for functional, analytical and commercial purposes. Functional cookies are required to use the website. Cookies collect the following personal data:

location data

IP address or application IDs

Internet browser and device type

site language

See the cookie statement for more details on cookies.

7. Fraud Prevention

We also process some of the above personal information to prevent fraud and other forms of abuse. The legal basis for this processing activity is that a legitimate interest in tomyklou.gr (fraud prevention) within the meaning of the GDPR must be pursued.

8. Analysis

We also use your personal data to fulfill our reporting obligations to advertisers and stakeholders and to improve our website and our range of products and services. The legal basis for this processing activity is that a legitimate interest in tomyklou.gr (R.S-switzerland) (analysis and reporting) within the meaning of the GDPR must be pursued. We will always ensure that reports do not contain any data that can be traced back to you.


Our website is not intended for persons under the age of 16 and we do not intend to collect personally identifiable information from website visitors under the age of 16. However, we have no way of verifying the age of visitors. Therefore, we encourage parents to monitor their children’s online activities to prevent collection of their personal information without parental consent. If you suspect that we have collected personal data from minors without consent, contact us at info@tomyklou.gr. Next we will arrange for the deletion of this data.

Automated decision making and profiling

tomyklou.gr (R.S-switzerland) uses automated decisions and profiles as part of contracting with you and to improve our platform. tomyklou.gr (R.S-switzerland) also uses automated decisions to comply with our legal obligations to prevent money laundering, terrorist financing and other crimes.

If such automated decision-making and/or profiling results in a negative decision for you and you do not agree, you can contact us at info@tomyklou.gr. Next, we will begin to reassess the situation. Apart from that, we would also appreciate if you could give us suggestions to improve these processes.

How long do we store your personal data?

tomyklou.gr (R.S-switzerland) will not store your personal information longer than is strictly necessary for the purposes for which your personal information is collected. We will keep your personal data longer if required by law. tomyklou.gr (R.S-switzerland) deletes most of your personal data 2 years after your order. We use this 2 year period for administrative purposes and to deal with questions and complaints about your order from you. We retain the personal information we use to report, analyze and prevent abuse for up to 20 years after your order. We cannot remove your personal data from backups. However, if we restore from a backup, we will delete your personal data immediately.

transfer to others

tomyklou.gr (R.S-switzerland) will not sell your personal data to third parties and we will only provide it to third parties if this is necessary for the performance of our contract with you, for analysis and marketing purposes or to comply with legal obligations.

Your personal information may be shared with the following parties:

Third parties who engage in various activities to promote, market or endorse our Services. This includes social media platforms like Facebook, offline account managers, website and application support and hosting services, marketing providers, eCRM partners who manage marketing messages and push notifications, delivery companies who manage your order, payment processing providers who process payment card transactions – one of these third parties may be in or outside your country of residence.

Law enforcement authorities, regulators or other authorities, courts or other third parties where we believe disclosure is required by applicable law or regulation.

New owners or reorganized companies and their agents and advisors in any reorganization, sale, purchase or consortium affecting our business.

software provider


Any other person with whom we may share your information with your permission

If you have opted for the personalized cookie package, we may transfer your personal data under a pseudonym to third-party platforms such as Google or Facebook in order to create “custom audience elements”. Such platforms display personalized ads based on these custom audience types. You can unsubscribe from these ads at any time by visiting the basic cookie package.

Whenever we outsource your personal data to us on our behalf, we enter into a data processing agreement to ensure the same level of protection and confidentiality of your personal data.

Third Party Sites

Our website may contain links to third party websites. When accessing these third-party websites, please note that each of these websites has its own privacy policy. Although healthskinsecret.ch takes great care in selecting websites for such links, we cannot accept any responsibility for the handling of your personal data by the operators of these websites.

International Data Transfer

We may transfer your information to countries outside of the country in which you are located. Although these countries may have different data protection laws than your country, you can be assured that helathyskinsecret.ch takes appropriate security measures to protect your information in these countries. in accordance with this privacy policy. The security measures we rely on may include the use of standard contractual clauses approved by the European Commission with our suppliers and intra-group transfer agreements.

Access, Correction and Deletion of Personal Data

You have the right to access any personal information that we collect about you and to request that we correct or erase your personal information. If you believe that we are processing your personal data without a valid legal basis or that we are processing personal data that is not related to our selection process, please contact us. You can contact us at info@tomyklou.gr. tomyklou.gr (R.S-switzerland) will respond to your request as soon as possible and within four weeks of receiving your request.

Tips, Questions and Complaints

If you have further questions or complaints about the processing of your personal data, we will be happy to help you. We would also appreciate if you could contact us for advice or suggestions on how to improve your privacy policy.


tomyklou.gr (R.S-switzerland) takes the protection of your personal data very seriously and therefore we take the appropriate measures to protect your personal data from misuse, loss, unauthorized access, unwanted disclosure and unauthorized modification. If you feel that your personal data is not adequately protected or there are indications of misuse, please contact us at info@tomklou.ch.

Complaint to the data protection authority

In addition to the possibility to lodge a complaint with us, you also have the right to lodge a complaint with the supervisory authority responsible for the protection of personal data. For this purpose you can contact the supervisor directly.

Updates to this Privacy Policy

Shopping Cart
Scroll to Top