Privacy Policy

1. Controller

The controller responsible for data processing on this website and in the WishHint App is:

Gimenez Productions
4051 - Basel
Switzerland
E-Mail: info@wishhint.net

2. Collection and Use of Personal Data

We collect and process personal data only to the extent necessary to provide a functional website and app, to perform contracts, and to protect our legitimate interests.

This includes:

Basic data (name, company, address, email, phone number)
Contract and payment data
Communication data
Website usage data (IP address, browser type, access time)
App-specific data:
- Login data (email and password, securely handled by Firebase Authentication)
- Wishlists / saved products (Cloud Firestore)
- Push notifications (only with your consent)

Purposes of processing include:

Fulfillment and execution of contracts
Offering and improving our services
Communication with you
Administration and operation of IT systems
Compliance with legal obligations

3. Data Sharing

We only share personal data with third parties if:

it is necessary for contract performance (e.g., hosting providers, payment processors),
we are legally obliged to do so, or
you have explicitly consented.

All service providers are contractually bound to comply with data protection laws.

4. Data Transfer Abroad

Data may be transferred outside Switzerland or the EEA (e.g., via cloud services such as Google Firebase) only if an adequate level of data protection is ensured or appropriate safeguards (e.g., EU Standard Contractual Clauses) are in place.

5. Data Retention

We store personal data only as long as necessary to fulfill contractual and legal obligations or if you have consented to further storage.
App data will be completely deleted upon account deletion in Firebase.

6. Your Rights

Under applicable data protection laws, you have the right to:

Access the personal data we store about you
Rectify incorrect data
Request deletion (“right to be forgotten”), unless prevented by legal obligations
Restrict processing
Data portability
Withdraw consent at any time
Object to processing (e.g., for direct marketing)

You can exercise these rights at any time by contacting us.

7. Security

We use technical and organizational security measures to protect your data against loss, manipulation, and unauthorized access. These measures are regularly reviewed and updated.

8. App-Specific Information

Firebase Authentication: for secure login
Cloud Firestore: for storing wishlists
No special permissions: the app does not access location, contacts, or camera
Push notifications: only after your active consent
App Stores: When downloading the app, Apple or Google may process data independently

9. Changes to this Privacy Policy

We reserve the right to change this privacy policy at any time, especially if our services or legal requirements change. The latest version will always be available on our website.