If you contact us through our contact addresses and channels (e.g., by e-mail, phone, or contact form), your personal data is processed. We process the data you provide us with, such as your name, email address, phone number, and your request. Additionally, the time of receipt of the request will be documented. We process this data to address your request (e.g., provide information about our products and services, answer questions regarding your orders, etc.).

If you contact us through chat, your personal data will be processed. We process the data you provide us with, such as your name, your email address, and your request. Additionally, the time of receipt of the request will be documented. Mandatory fields are marked with an asterisk (*). We process this data exclusively to address your request (e.g., provide information about our products and services, etc.).

For providing the chat service, in particular to answer your requests, we partner with our trusted agency, United Call Centers Kft. (Ltd.), 3525 Miskolc, Kis-Hunyad utca 9/2, Hungary (UCC). Therefore, UCC may need to access your data in connection with your use of the chat service. Information about data processing by UCC can be found at https://unitedcallcenters.eu/documents/PrivacyPolicyandDataProtection.pdf.

If you create a customer account on our Website, we collect the following data, where mandatory fields in the corresponding form are marked with an asterisk (*):

To ensure you can enjoy all the functionalities and offers on our Website, please provide complete and accurate information. Please be aware that failing to provide all the necessary information may limit the extent and quality of the services we can provide to you.

We use the personal data to verify your identity and to check the requirements for registration. The email address and password together serve as login data to ensure that the correct person uses the Website based on provided details. We also need your email address to verify and confirm the creation of your account and for future communication with you, which is necessary for the execution of your orders. Additionally, this data is stored in the customer account.

The gender information is processed to obtain demographic information about our users and provide more personalised offers. You also have during the registration the option not to disclose this information.

Please be informed that upon registering on this Website, your credentials will also enable access to other brand websites operated by BAT Switzerland, in particular: www.vuse.com, www.discoverglo.com, www.dunhilltobacco.ch, www.parisienne.ch and www.luckystrike.ch. This unified account system is designed to provide you with a seamless experience across our various brand platforms.

To prevent misuse, please always keep your login data confidential, log out after each session and clear your browsing history, especially when using the device together with others.

To verify your age, we direct you to the age verification portal provided by Yoti Limited, Fountain House, 130 Fenchurch Street, London, EC3M 5DJ, UK. Yoti Limited provides two options for the age verification: ID check or facial analysis. In respect to the ID check, Yoti Limited processes a scan of your ID document including the information contained therein, and a picture / selfie of you. The selfie is used to match yourself with the scanned ID document. Yoti Limited does not store your personal data. BAT does not receive the ID scan or your selfie. We receive from Yoti Limited an over/under age, year of age information. In regard to the facial analysis option, Yoti Limited processes a face selfie made by the user with its device. Yoti Limited processes the face selfie and the biometric information contained in the selfie. An algorithm estimates the age of the user via facial analysis. Yoti Limited does not store the personal data. It does, in particular, not use the data for training purposes. BAT does not receive your selfie. We only receive from Yoti Limited an estimated age with set buffer years. Further information about data processing by Yoti Limited in connection with age verification can be found at https://www.yoti.com/privacy/age-verification/.

Please note the following: As part of the age verification, we may make automated individual decisions within the meaning of Art. 21 Swiss Federal Act on Data Protection (FADP), e.g. by automatically refusing to open a customer account on the basis of an (automated) age check. Users who have been refused the opening of an account based on a negative automated age check have the opportunity to present their point of view upon request. The request must be sent to the e-mail address info.ch@velo.com. The data subject may also request that the automated individual decision be reviewed by a natural person. This request must also be sent by e-mail to privacy_ch@bat.com.

To authenticate customer accounts, we use Single Sign-On (SSO) services provided by XECURIFY INC., US. SSO enables users to access multiple applications with a single set of login credentials (username and password). Once logged in, users can seamlessly navigate between different websites operated by BAT Switzerland without the need to log in again for each one. XECURIFY INC. does not store your personal data. The service is implemented in the system of BAT and operated by Yucca Solutions SA, Rue de la Clergère 2, 1800 Vevey, Switzerland (Yucca Solutions).

On the login / registration pages of our Website the CSS framework Bootstrap of the company LLC. NetDNA, 3575, Cahuenga Blvd Suite 630, Los Angeles, CA 90068, USA (Bootstrap CDN) is integrated. It is used to optimally display the content we offer on the various end devices and to reduce the loading speeds of our Website. Bootstrap CDN is a public content delivery network (CDN) for providing content. Users of Bootstrap CDN can load CSS, JavaScript and images remotely from their servers. If JavaScript is enabled in your browser and no (Java)Script blocker is installed either, your browser will transmit personal data (e.g., your IP address and browser) to Bootstrap CDN when loading our page. You can find the provider's privacy policy at https://www.bootstrapcdn.com/privacy-policy/. Bootstrap may process personal data outside the EU/EEA. The transfer of personal data is safeguarded via standard contractual clauses (see section "Disclosure and Cross-Border Transfer").

When using the login or registration pages of our Website, an ID, type, version and language of the device, the duration of use and crash logs are collected for statistics, usage information and error recording. The Microsoft Visual Studio App Center (https://appcenter.ms) is used for this purpose. More information on this and on the privacy policy of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA, can be found at https://privacy.microsoft.com/en-gb/privacystatement. Microsoft may process personal data outside the EU/EEA. The transfer of personal data is safeguarded via standard contractual clauses (see section "Disclosure and Cross-Border Transfer").

In addition to opening a user account directly on our Website, you may also initiate the opening of your customer account for the Website via our host/hostess platform.

If you create a customer account on the hostess platform, we collect the following data, where mandatory fields in the corresponding form are marked with an asterisk (*):

To ensure you can enjoy all the functionalities and offers on our Website, please provide complete and accurate information. Please be aware that failing to provide all the necessary information may limit the extent and quality of the services we can provide to you. The host/hostess will on-site check your age.

We use the personal data to verify your identity and to check the requirements for registration. We need your email address to verify and confirm the creation of your account and for future communication with you. Additionally, this data is stored in the customer account.

Upon completing the registration form on the hostess platform, you will receive an e-mail from us with a confirmation link. After activating the link you will be directed to the last steps of the account registration.

Please be informed that upon registering on this Website, your credentials will also enable access to other brand websites operated by BAT Switzerland, in particular: www.vuse.com, www.discoverglo.com, www.dunhilltobacco.ch, www.parisienne.ch and www.luckystrike.ch. This unified account system is designed to provide you with a seamless experience across our various brand platforms.

To prevent misuse, please always keep your login data confidential, log out after each session and clear your browsing history, especially when using the device together with others.

The technical infrastructure of the host/hostess platform is provided, supported and maintained by our service provider ComputedBy Sàrl, Rue de Langallerie 6, 1003 Lausanne. ComputedBy might receive for these purposes temporary access to personal data processed via the platform.

On our Website, you have the possibility to purchase products, provided that you have opened a customer account. For this purpose, we collect the following data, whereby mandatory fields during the ordering process are marked with an asterisk (*):

We use the data to verify your identity before the confirmation of your order. We need your email address for order confirmation and for future communication necessary for the execution of the order. We store your data together with the relevant order details (e.g., time, order number), information about the purchased products or services (e.g., product name, price, characteristics), payment information (e.g., selected payment method, payment confirmation, and time of the payment) as well as the information regarding the execution of the order (e.g., product returns, warranty, or service claims) in our CRM database, so that we can ensure correct execution of your order.

The provision of data that is not marked as mandatory is voluntary. We process this data to tailor our products and services to your personal needs, to facilitate the execution of orders, to contact you through alternative means of communication if necessary, or for collection and analysis of statistical information in order to optimize our products and services.

For executing your orders, we disclose the required information to our wholesaler Ch. Margot & Cie S.A., Route de Lavaux 235, 1095 Lutry, Switzerland. Therefore, your data may be stored in a database of Ch. Margot & Cie S.A., which may allow Ch. Margot & Cie S.A. to access your data if this is necessary for the execution of your order. Information about data processing by Ch. Margot & Cie S.A. can be found at https://shop.margot.ch/privacy-policy-cookie-restriction-mode.

Ch. Margot & Cie S.A. uses the services of Post CH AG, Wankdorfallee 4, 3030 Bern, Switzerland ("Swiss Post"), to ship our products to you, and for this purpose, it shares data with SwissPost. You can find information about data processing by Swiss Post at https://www.post.ch/de/pages/footer/datenschutz-und-rechtliches.

If you use the functionality "invite a friend", your personal data will be processed. The functionality can only be used after you have opened a customer account. We will process the data you provide us with, such as your personal information and email address, to send you an email with a unique link that you can share with your friend. Additionally, the time of receipt of the interaction will be documented. We process this data exclusively to provide the functionality.

We offer the VELO+ program, which is available on our Website after opening a customer account.

The VELO+ program permits participants to collect VELO+ points in specific constellations (for example, for purchases in the online shop). The points can then be redeemed on the Website. The points collected and the redemptions will be administered through your customer account. In order to redeem points, you need to log-in into your customer account. For the delivery of the items that participants redeem with the points, we will process the contact data of the respective customer, such as name, address.

To ensure the proper administration of the VELO+ program, we will store this data, along with relevant details, timing, and program-related information, within our CRM database.

For arranging the delivery of items, we disclose the required information to our wholesaler Ch. Margot & Cie S.A., Route de Lavaux 235, 1095 Lutry, Switzerland. Therefore, your data may be stored in a database of Ch. Margot & Cie S.A., which may allow Ch. Margot & Cie S.A. to access your data if this is necessary for providing the software and supporting its use. Information about data processing by Ch. Margot & Cie S.A. can be found at https://shop.margot.ch/privacy-policy-cookie-restriction-mode.

Ch. Margot & Cie S.A. uses the services of Post CH AG, Wankdorfallee 4, 3030 Bern, Switzerland ("Swiss Post"), to ship our products to you, and for this purpose, it shares data with SwissPost. You can find information about data processing by Swiss Post at https://www.post.ch/de/pages/footer/datenschutz-und-rechtliches.

We offer the VELO abo subscription, which is available on our Website after opening a customer account. For this purpose, we will collect the following additional information:

To ensure the proper administration of the VELO abo, we will store this data, along with relevant details, timing, and program-related information, within our CRM database.

For executing your orders, we disclose the required information to our wholesaler Ch. Margot & Cie S.A., Route de Lavaux 235, 1095 Lutry, Switzerland. Therefore, your data may be stored in a database of Ch. Margot & Cie S.A., which may allow Ch. Margot & Cie S.A. to access your data if this is necessary for providing the software and supporting its use. Information about data processing by Ch. Margot & Cie S.A. can be found at https://shop.margot.ch/privacy-policy-cookie-restriction-mode.

Ch. Margot & Cie S.A. uses the services of Post CH AG, Wankdorfallee 4, 3030 Bern, Switzerland ("Swiss Post"), to ship our products to you, and for this purpose, it shares data with SwissPost. You can find information about data processing by Swiss Post at https://www.post.ch/de/pages/footer/datenschutz-und-rechtliches.

If you place an order in our online shop or subscribe to the VELO abo, it may be necessary to provide additional details such as your credit card information or login credentials for your payment service provider. This information, as well as the fact that you have placed an order at a certain time and for a specific amount, will be forwarded to the respective payment service providers (e.g., payment solution providers, credit card issuers, or credit card acquirers, such as Postfinance or Twint). The payment service providers chosen by you during the payment process are responsible for their own data processing. For further information about their data processing, please go to their websites (see, for example, https://www.twint.ch/en/data-privacy/?lang=en for Twint, or https://www.postfinance.ch/en/detail/data-protection.html for Postfinance).

When you use a wallet payment solution, your card details are securely stored in the wallet in advance. If you choose to make a payment using a wallet solution, you typically do not need to enter credit card information again. In this regard, please always consider the information provided by the respective payment solution provider, in particular in its privacy policy and the general terms and conditions.

When opening your customer account or thereafter directly in the settings of your customer account, you can opt-in to our marketing communication. To provide you with marketing communication, we may collect the following data:

By opting-in to receive marketing communication, you consent to the processing of this data to receive tailored marketing emails from us about our products and services. These marketing emails may also include invitations to participate in contests, to provide feedback (including through participation in surveys and/or consumer research), or to rate our products and services.

We will send you marketing communication with postal services only if you have explicitly opted-in to receive communication via this channel.

We will use your data to send marketing communication until you withdraw your consent. You can withdraw your consent at any time, in particular by using the unsubscribe link included in all marketing emails or by adjusting the relevant settings in your customer account.

Our marketing emails may contain a web beacon, 1x1 pixel (tracking pixel), or similar technical tools. A web beacon is an invisible graphic that is linked to the user ID of the respective subscriber. For each marketing email sent, we receive information about which email addresses it was successfully delivered to, which email addresses have not yet received the marketing email, and which email addresses the delivery has failed for. It is also shown which email addresses have opened the marketing email and for how long, as well as which links have been clicked. Finally, we also receive information about subscribers who have unsubscribed from the mailing list. We use this data for statistical purposes and to optimize the frequency and timing of email delivery, as well as the structure and content of the marketing emails. This allows us to better tailor the information and offers in our marketing emails to the individual interests of the recipients.

The web beacon is deleted when you delete the marketing email. You can prevent the use of web beacons in our marketing emails by adjusting the settings of your email program so that HTML is not displayed in messages. You can find information on how to configure this setting in the help documentation of your email software application, e.g., here for Microsoft Outlook.

By subscribing to the marketing emails, you also consent to the statistical analysis of user behaviour for the purpose of optimising and customising the marketing emails.

For sending marketing emails, we use a software application provided by Salesforce Inc., One Market Street, San Francisco, USA (Salesforce). Therefore, your data may be stored in a database of Salesforce, which may allow Salesforce to access your data if this is necessary for providing the software and supporting its use. Information about data processing by third parties and any transfers abroad can be found in the section "Disclosure and Cross-Border Transfer" below.

There is a possibility that Salesforce may want to use some of this data for its own purposes (e.g., for sending marketing emails or conducting statistical analysis). For these data processing activities, Salesforce is the controller and must ensure compliance of these processing activities with data protection laws. Information about data processing by Salesforce can be found at https://www.salesforce.com/eu/company/privacy/.

As part of the Salesforce solution and its connection to the website infrastructure, we are assisted by an IT company based in India. This company is responsible for the operation of the Salesforce solution (improvements, bugs, reports, etc.). Although the processing of personal data of website users is not the main task of this company, it may exceptionally have access to this data in the course of providing its services. Information on the processing of data by third parties and its possible transfer abroad can be found in the section “Transfer and transfer abroad.”

When you engage with our services, you may choose to participate in our paid media marketing campaigns, allowing us to share certain data with our trusted marketing agency EssenceMediacom AG, Zurich, Switzerland. EssenceMediacom AG assists us in developing our media strategies, conducting data analysis and management, as well as implementing personalised campaigns on different marketing platforms, such as Xandr, Meta, Google, DV360, AdForm, Teads, Ogury, etc. These campaigns may include, but are not limited to, targeted advertisements, promotions, and engagement initiatives designed to enhance your experience with our products and services from our different brands.

Cookies are information files that your web browser stores on the hard drive or in the memory of your computer when you visit our Website. Cookies are assigned identification numbers that enable your browser to be identified, and allow the information contained in the cookie to be read.

Cookies are used to make your visit to our Website easier, more enjoyable, and more meaningful. We use cookies for various purposes that are necessary for the desired use of the Website, i.e., "technically necessary." For example, we use cookies to identify you as a registered user after logging in, so you don't have to log in again when navigating to different subpages. The provision of ordering functions also relies on the use of cookies. Furthermore, cookies perform other technical functions necessary for the operation of the Website, such as load balancing, which distributes the workload of the site across various web servers to relieve the servers. Finally, we use cookies in the design and programming of our Website, for example, to enable the uploading of scripts or codes.

Most internet browsers accept cookies automatically. However, when accessing our Website, we ask for your consent to the use of non-essential cookies, especially for the use of cookies from third parties for marketing purposes. You can adjust your preferences for cookies by using the corresponding buttons in the cookie banner. Details regarding the services and data processing associated with each cookie can be found within the cookie banner and in the following sections of this Data Privacy Policy.

You may also be able to configure your browser to prevent cookies from being stored on your computer or receive a notification whenever a new cookie is being sent. On the following pages, you will find instructions on how to configure cookie settings for selected browsers.

Disabling cookies may prevent you from using all the features of our Website.

For the purpose of customizing and continuously optimizing our Website, our Website contains the web analytics services listed below. In this context, pseudonymised usage profiles are created, and cookies are used. The information generated by the cookie regarding your use of our Website is usually transmitted to a server of the service provider, where it is stored and processed, together with the log file data. This may also result in a transfer to servers abroad, e.g., the USA (for information on the absence of an adequate level of data protection and the proposed safeguards, see the section "Disclosure and Cross-Border Transfer").

The providers, on our behalf, will use this information or aggregated data to evaluate the use of the Website, in particular to compile Website activity reports and provide further services related to Website usage and internet usage for the purposes of market research and the customization of the Website. For these processing activities, we and the providers may be considered joint controllers in terms of data protection to a certain extent. The mentioned information or reports may also be shared with our marketing agency EssenceMediacom AG, Zurich, Switzerland.

You can withdraw your consent or oppose to processing at any time by rejecting or deactivating the relevant cookies in the settings of your web browser or by using the service-specific options described below.

Regarding the further processing of the data by the respective provider as the (sole) controller, including any potential disclosure of this information to third parties, such as authorities due to national legal regulations, please refer to the respective privacy policy of the provider.

We use the web analytics service Google Analytics provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, or Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").

IP addresses are not logged or stored in Google Analytics. For accesses originating from the EU, IP address data is only used to derive location data and is immediately deleted thereafter. When collecting measurement data in Google Analytics, all IP searches take place on EU-based servers before the traffic is forwarded to Analytics servers for processing. Google Analytics utilises regional data centres. When connecting to the nearest available Google data centre in Google Analytics, the measurement data is sent to Analytics via an encrypted HTTPS connection. In these centres, the data is further encrypted before being forwarded to Analytics' processing servers and made available on the platform. The most suitable local data centre is determined based on the IP addresses. This may also result in a transfer of data to servers abroad, e.g., the USA (for information on the absence of an adequate level of data protection and the proposed safeguards, see the section "Disclosure and Cross-Border Transfer").

We also use the technical extension called "Google Signals", which enables cross-device tracking. This makes it possible to associate a single website visitor with different devices. However, this only happens if the visitor is logged into a Google service during the Website visits and has activated the "personalised advertising" option in their Google account settings. Even in such cases, we do not have access to any personal data or user profiles; they remain anonymous to us. If you do not wish to use "Google Signals," you can deactivate the "personalised advertising" option in your Google account settings.

Users can prevent the collection of data related to their Website usage (including IP address) generated by the cookie as well as the processing of this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en-GB.

The transfer of your personal data to Google is based on a data processing agreement (Art. 9 FADP). Google may process personal data outside the EU/EEA. The transfer of personal data is safeguarded via standard contractual clauses (see section "Disclosure and Cross-Border Transfer").

Our Website contains tools and services of various companies to provide you with interesting offers online. In the process of doing this, your user behavior on our Website and websites of other providers is analysed in order to subsequently be able to show you online advertising that is individually tailored to you. We work for this purpose with our marketing agency EssenceMediacom AG, Zurich, Switzerland, which determines the services and tools to be placed on our Website.

Most technologies for tracking your user behavior (Tracking) and displaying targeted advertising (Targeting) utilize cookies (see also section "Cookies"), which allow your browser to be recognized across different websites. Depending on the service provider, it may also be possible for you to be recognized online even when using different end devices (e.g., laptop and smartphone). This may be the case, for example, if you have registered for a service that you use with several devices.

In addition to the data already mentioned, which is collected when visiting websites (Log File Data,) and through the use of cookies (section "Cookies") and which may be transmitted to the companies involved in the advertising networks, the following data, in particular, is commonly used by our marketing agency and / or the marketing platforms to select the advertising that is potentially most relevant to you:

The service providers mentioned below use this data to determine whether you belong to the target audience we address and take this into account when selecting advertisements. For example, after visiting our Website, you may see advertisements for the products or services you have viewed when you visit other sites (Re-targeting). Depending on the amount of data, a user profile may also be created, which is automatically analyzed; the advertisements are then selected based on the information stored in the profile, such as belonging to certain demographic segments or potential interests or behaviors. These advertisements may be displayed to you on various channels, including our Website or app (as part of on- and in-app marketing), as well as advertising placements provided through the online advertising networks we use, such as Google.

The data may then be analyzed for the purpose of settlement with the service provider, as well as for evaluating the effectiveness of advertising measures in order to better understand the needs of our users and customers and to improve future campaigns. This may also include information that the performance of an action (e.g., visiting certain sections of our Website or submitting information) can be attributed to a specific advertising. We also receive from service providers aggregated reports of advertisement activity and information on how users interact with our Website and advertisements.

Certain information about the performance of the campaigns is forwarded by the service providers to our marketing agency EssenceMediacom AG, Zurich, Switzerland, so that it can analyze the success of the campaign and adjust, if required, future campaigns.

Our Website contains services and functionalities provided by the company Virtual Minds GmbH, Ellen-Gottlieb-Straße 16, D-79106 Freiburg im Breisgau. Company offers technologies that enable us or our marketing agency EssenceMediacom AG, Zurich, Switzerland, on behalf of us, to deliver target-group oriented digital ads. With the help of cookies and similar technologies, the following information is collected by Virtual Minds GmbH (in addition to the ones already mentioned above):

More information about the data processing through Virtual Minds services can be found under https://www.adition.com/en/privacy-platform/.

You can consent to the processing of your personal data by Virtual Minds and/or prevent it/withdraw your consent at any given time through our cookie banner. To withdraw your consent, go to the cookie settings of your browser (see under section "Cookies").

Our marketing agency participates on our behalf in the "Amazon Ads" advertising partner program of Amazon Europe S.à r.l., which was designed to provide a medium for websites by means of which advertising refunds can be earned through the placement of advertisements and links to Amazon websites. With the program, we pursue the interest of showing you advertisements that are of interest to you and to make our Website more interesting for our users.

Further information about Amazon: Amazon EU S.à r.l., Amazon Services Europe S.à r.l. and Amazon Media EU S.à r.l., all three located 5, Rue Plaetis, L-2338 Luxembourg; e-mail: eu-privacy@amazon.de eu-privacy@amazon.de

For the provision of the advertisements, statistical information about you is collected, which is processed by our advertising partners. By visiting the Website, Amazon receives the information that you have accessed the corresponding page of our Website. For this purpose, Amazon determines your demand via web beacons and may set a cookie on your computer. If you are logged in to Amazon, your data can be directly assigned to your account there. If you do not want the assignment with your Amazon profile, you must log out. It is possible that your data will be passed on to contractual partners of Amazon and authorities. We have no influence on the data collected, nor are we aware of the full extent of the data collection. The data is transferred to the USA and evaluated there.

You can prevent the storage of cookies by not granting or revoking your consent in our cookie banner, or by making the appropriate settings in your browser software. You can also deactivate the interest-based ads at Amazon via the link: https://www.amazon.com/adprefs.

Based on so-called EU standard contractual clauses, Amazon undertakes to comply with a data protection standard that essentially corresponds to the European standard in the event of transfer to the USA: https://advertising.amazon.com/en-us/resources/ad-policy/eu-data-protection-and-privacy.

More information about Amazon's privacy policy: https://www.amazon.com/gp/help/customer/display.html?nodeId=GX7NJQ4ZB8MHFRNJ.

Our marketing agency has integrated on our behalf AppNexus / Xandr on our Website. AppNexus / Xandr is a service provided by Xandr Inc., located in NY, USA, to display targeted advertising to users. AppNexus uses cookies and other browser technologies to analyze user behavior and recognize users.

AppNexus / Xandr collects information about visitor behavior on various websites. This information is used to optimize the relevance of advertising. Furthermore, AppNexus / Xandr delivers targeted advertising based on behavioral profiles and geographic location. Your IP address and other identifiers such as your user agent are transmitted to the provider.

For more information, please see the AppNexus privacy policy: https://about.ads.microsoft.com/en-us/solutions/xandr/platform-privacy-policy.

You can consent to the processing of your personal data by Xandr and/or prevent it/withdraw your consent at any given time through our cookie banner. To withdraw your consent, go to the cookie settings of your browser (see under section "Cookies").

The transfer of your personal data to Xandr is based on data processing agreements (Art. 9 FADP). Xandr may process personal data outside the EU/EEA. The transfer of personal data is safeguarded via standard contractual clauses (see section "Disclosure and Cross-Border Transfer").

This Website uses Google Marketing Platform's DoubleClick, a service provided by Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland.

DoubleClick uses cookies to present you with advertisements that are relevant to you. In doing so, a pseudonymous identification number (ID) is assigned to your browser or device to verify which ads were displayed in your browser and which ads were viewed. This can improve campaign performance or, for example, prevent you from seeing the same ad more than once. In addition, Google can use cookie IDs to record so-called conversions that are related to ad requests. This is the case, for example, when a user sees a Campaign Manager ad and later uses the same browser to visit the advertiser's website and make a purchase.

You can consent to the processing of your personal data by Google and/or prevent it/withdraw your consent at any given time through our cookie banner. To withdraw your consent, go to the cookie settings of your browser (see under section "Cookies").

Due to the technology used, your browser automatically sets up a direct connection with the servers of Google. Google acts as a data controller and may process your personal data for other purposes. We have no control over the data that Google collects or the extent of the data collected by Google. We also have no knowledge of the content of the data transmitted to Google. For details about Google’s data processing, please refer to: https://policies.google.com/privacy. We inform you therefore to the best of our knowledge: Google receives the information that you have accessed the section of our Website where the cookies are placed or that you have clicked on an ad of us. In case that you are registered with a service of Google at that moment, Google can allocate your visit or access to your Google account. Even when you are not registered, it is not entirely excluded that the provider can find out your IP-address and store it. It can also not entirely be excluded that data is transferred to Google LLC in the USA. Google may process personal data outside the EU/EEA. The transfer of personal data is safeguarded via standard contractual clauses (see section "Disclosure and Cross-Border Transfer").

We or our marketing agency on our behalf use the “Website Custom Audiences” pixel from Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour2, Dublin, Irland, on our Website. When you visit our Website, the tracking pixel is used to establish a direct connection between your browser and Facebook’s server. As a result, Facebook receives information from your browser including the fact that your terminal has accessed our Website. If you are a Facebook user, Facebook can assign the visit to our Websites to your user account. We would like to point out that we, as the provider of the Website, have no knowledge of the content of the transmitted data or of how it is used by Facebook. We can only select which sectors of Facebook users (such as age, interests) should see our advertisements displayed. In this process, we use one of two modes of working from Custom Audiences, in which no datasets — in particular, none of our users’ e-mail addresses — are transferred to Facebook.

You will find further information on this subject in Facebook’s privacy policy at https://www.facebook.com/about/privacy/.

Click here if you do not wish data to be collected using Custom Audiences: https://www.facebook.com/settings?tab=ads#_=_.

Alternatively, you can deactivate the Facebook pixel on the Digital Advertising Alliance website under the following link: http://www.aboutads.info/choices/.

Google Ads offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Google), is integrated on our Website. This service is used for online advertising. Google uses cookies, which allow your browser to be recognised when you visit other websites. The information generated by the cookie about your visit to this Website (including your IP address) will be transmitted to and stored by Google.

Google acts as a data controller for Google Ads and may process your personal data for other purposes. We have no control over the data that Google collects or the extent of the data collected by Google. We also have no knowledge of the content of the data transmitted to Google. For details about Google’s data processing, please refer to: https://policies.google.com/privacy. Google may process personal data outside the EU/EEA. The transfer of personal data is safeguarded via standard contractual clauses (see section "Disclosure and Cross-Border Transfer").

On our Website, the service reCAPTCHA provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, is integrated.

reCAPTCHA is used to determine whether data input on our Website is done by a human or an automated program and aimed at protecting the Website from spam and abuse. For this purpose, reCAPTCHA analyses the behaviour of the Website users based on various characteristics. This analysis starts automatically as soon as the Website user accesses the Website. reCAPTCHA evaluates various information, including IP address, duration of the Website visit, or mouse movements made by the user. The data collected during the analysis is forwarded to Google. The reCAPTCHA analysis operates entirely in the background.

For more information about Google reCAPTCHA and Google's privacy policy, please refer to the following link: https://policies.google.com/privacy?hl=en-GB.

Adobe Analytics, a web analytics service provided by Adobe Systems Software Ireland Limited (Adobe), 4–6 Riverwalk, City West Business Campus, Dublin 24, Ireland, is integrated on our Website.

The service is primarily used to track and analyse user behaviour on our Website. Adobe Analytics cookies are employed to facilitate an analysis of your usage of our Website, enabling the identification of unique visitors. These cookies assign a unique ID to each visitor, allowing us to track user interactions across various pages and sessions. Additionally, Adobe Analytics cookies are used to store information regarding your most recent clicks on our Website.

You can consent to the processing of your personal Data by Google and/or prevent it/withdraw your consent at any given time through our cookie banner. To withdraw your consent, go to the cookie settings of your browser (see under section "Cookies").

For details about Adobe’s data processing, please refer to: https://www.adobe.com/ch_de/privacy/policy.html. Adobe may process personal data outside the EU/EEA. The transfer of personal data is safeguarded via standard contractual clauses (see section "Disclosure and Cross-Border Transfer").

MediaMath Analytics & Insights, a web analytics service provided by MediaMath, Inc., NY, USA, is integrated on our Website. MediaMath uses cookies that are stored on your terminal device and that enable an analysis of your use of the website. The data stored herein may include, for example, browser type, operating system, browser language, IP address and Internet provider.

MediaMath processes the data associated with your terminal device into a pseudonym, a so-called "MediaMath ID". This unique MediaMath ID may then be stored in a cookie on your terminal device and helps to deliver more relevant ads to you. The MediaMath ID and other information collected through the MediaMath's advertising services may also help us measure your activity on our Website to determine the effectiveness of the ads served through the MediaMath's advertising services. This allows us to better meet your needs. It also allows us to display ads to you for the types of products in which you may be interested. MediaMath may transfer this information to third parties where required to do so by law or where such third parties process the information on MediaMath's behalf.

For more information about how MediaMath uses your information and a way to prevent MediaMath's use of cookies, please see MediaMath's privacy policy at: https://www.mediamath.com/privacy-policy/. In addition, you can opt-out under this URL: http://www.mediamath.com/ad-choices-opt-out/.

MediaMath may process personal data outside the EU/EEA. The transfer of personal data is safeguarded via standard contractual clauses (see section "Disclosure and Cross-Border Transfer").

Salesforce Chat, a tool that enables us to communicate in real-time with website users, is integrated on our Website. Provider of the services is the company Salesforce Inc., One Market Street, San Francisco, USA.

You find further information about the data processing by Salesforce under https://www.salesforce.com/eu/company/privacy/.

You can consent to the processing of your personal data by Salesforce and/or prevent it/withdraw your consent at any given time through our cookie banner. To withdraw your consent, go to the cookie settings of your browser (see under section "Cookies").

Salesforce may process personal data outside the EU/EEA. The transfer of personal data is safeguarded via standard contractual clauses (see section "Disclosure and Cross-Border Transfer").

The Google Tag Manager is integrated on the Website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The Google Tag Manager is a tool that allows us to integrate tracking or statistical tools and other technologies on our Website. The Google Tag Manager itself does not create user profiles, does not store cookies and does not perform any independent analyses. It only serves to manage and play out the tools integrated via it. However, the Google Tag Manager collects your IP address, which may also be transferred to Google's parent company in the United States.

For details about Google’s data processing, please refer to: https://policies.google.com/privacy. Google may process personal data outside the EU/EEA. The transfer of personal data is safeguarded via standard contractual clauses (see section "Disclosure and Cross-Border Transfer").

When it is necessary for the execution of your order(s) or the provision of other services, your data may be shared with other companies within the BAT group, notably with BAT Switzerland Vending SA.

Without the support of other companies, we would not be able to provide our products and services in the desired form. To use the services of these companies, it is necessary to share your personal data with these companies to a certain extent. A disclosure of data is limited to selected third-party service providers and only to the extent necessary for the optimal provision of our services. Various third-party service providers are mentioned in this Data Privacy Policy above.

The hosting services, as well as assistance in modifying and updating our Website's content are provided by Yucca Solutions SA, Rue de la Clergère 2, 1800 Vevey, Switzerland (Yucca Solutions). Yucca Solutions may, in exceptional circumstances, need to access personal data of website users if this is necessary for providing the mentioned services.

Hosting for certain e-commerce functionalities on the Website is provided by the company Magento Inc. based in the USA. For this purpose, personal data relevant to these functionalities is also stored on Magento servers in Europe. Magento obtains the personal data via interfaces from Salesforce (see above “Central Data Storage and Analysis in the CRM system”). Magento may process personal data outside the EU / EEA. The transfer of personal data is safeguarded via standard contractual clauses (see section “Disclosure and Cross Border Transfer”). For more information about the processing of personal data by Magento Inc., please refer to: General Data Protection Regulation (GDPR) and Adobe.

For providing customer care service, we partner with our trusted agency, United Call Centers Kft. (Ltd.), 3525 Miskolc, Kis-Hunyad utca 9/2, Hungary (UCC). Therefore, UCC may need to access your data if this is necessary for providing the customer care services. Information about data processing by UCC can be found at https://unitedcallcenters.eu/documents/PrivacyPolicyandDataProtection.pdf.

Our Website uses the content delivery network Gstatic, operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: Gstatic). This is done to ensure the full functionality of our Website and improve its loading speed by delivering static files such as scripts, fonts, and images efficiently. In this context, your browser transmits your IP address and browser information to Gstatic. This data is processed solely for the purpose of delivering the requested content and is not stored longer than necessary to fulfil this purpose. For more information on the handling of the transferred data, please refer to Google's privacy policy: https://policies.google.com/privacy. You can prevent the collection as well as the processing of your data by Gstatic by disabling the execution of script code in your browser or by installing a script blocker.

Your data may be disclosed to third parties to the extent necessary for the execution of orders and the provision of services to you. For these data processing activities, the third-party service providers are considered data controllers under the data protection laws, and not us. It is the responsibility of these third-party service providers to inform you about their own data processing, which may extend beyond the mere sharing of data for the provision of services, and to comply with data protection laws.

Furthermore, your data may be disclosed, especially to authorities, legal advisors, or debt collection agencies, if we are legally obliged to do so or if it is necessary to protect our rights, in particular to enforce claims arising from our relationship with you. Data may also be disclosed if another company intends to acquire our company or parts thereof, and such disclosure is necessary to conduct a due diligence or to complete the transaction.

We have the right to transfer your personal data to third parties located abroad if it is necessary to carry out the data processing described in this Data Privacy Policy. When making such transfers, we will ensure compliance with the applicable legal requirements for disclosing personal data to third parties. The countries to which data is transmitted include those that, according to the decision of the Federal Council, have an adequate level of data protection (such as the member states of the EEA), as well as those countries (such as the USA) whose level of data protection is not considered adequate (see Annex 1 of the Data Protection Ordinance). If the country in question does not provide an adequate level of data protection, we ensure, unless otherwise specified, that your data is adequately protected by these companies by means of appropriate safeguards. These safeguards may be provided for by standard contractual clauses, which can be found on the websites of the Federal Data Protection and Information Commissioner. If you have any questions regarding the implemented measures, please send us an e-mail to the following address: privacy_ch@bat.com.

Some of the third-party service providers mentioned in this Data Privacy Policy are based in the USA. For the sake of completeness, we would like to inform users residing or based in Switzerland or the EU that certain third-party service providers mentioned in this Data Privacy Policy are located in the USA. It is important to note that there are surveillance measures by US authorities in place that generally allow for the storage of all personal data of individuals whose data has been transmitted from Switzerland or the EU to the United States. This occurs without differentiation, limitation, or exception based on the purpose for which the data is being collected and without an objective criterion that would restrict US authorities' access to the data and its subsequent use to specific, strictly limited purposes that can justify the interference associated with accessing and using the data. Furthermore, we would like to point out that affected individuals from Switzerland or the EU do not have legal remedies or effective judicial protection against general access rights of US authorities, which would allow them to access the data concerning them and to rectify or delete it. We explicitly highlight this legal and factual situation to enable you to make an informed decision regarding your consent to the use of your data.

For users residing in Switzerland or a member state of the EU, we also want to inform you that, from the perspective of the European Union and Switzerland, the United States does not provide an adequate level of data protection, among other reasons, as explained in this paragraph. In cases where we have mentioned in this Data Privacy Policy that data recipients (such as Google) are located in the United States, it will be ensured through contractual arrangements with these companies and, if necessary, additional appropriate safeguards, that your data is adequately protected.