Privacy Policy

1. Data protection at a glance

General information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. Detailed information on the subject of data protection can be found in our data protection declaration listed below this text.

This privacy policy contains references to the Swiss Data Protection Act (DPA) and the EU General Data Protection Regulation (GDPR).

Data collection on this website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. You can find the operator's contact details in the "Information on the controller" section of this privacy policy.

How do we collect your data?

On the one hand, your data is collected when you provide it to us. This may, for example, be data that you enter in a contact form.

Other data is collected automatically or with your consent by our IT systems when you visit the website. This is primarily technical data (e.g. internet browser, operating system or time of page view). This data is collected automatically as soon as you enter this website.

What do we use your data for?

Some of the data is collected to ensure that the website is provided without errors. Other data may be used to analyse your user behaviour.

What rights do you have regarding your data?

You have the right to receive information about the origin, recipient and purpose of your stored personal data free of charge at any time. You also have the right to request the correction or deletion of this data. If you have given your consent to data processing, you can revoke this consent at any time for the future. You also have the right to request the restriction of the processing of your personal data under certain circumstances. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

You can contact us at any time if you have further questions on the subject of data protection.

Analysis tools and tools from third-party providers

When you visit this website, your surfing behaviour may be statistically evaluated. This is mainly done with so-called analysis programmes.

Detailed information on these analysis programmes can be found in the following privacy policy.

2 General notes and mandatory information

Data protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

When you use this website, various personal data is collected. Personal data is data that can be used to identify you personally. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

We would like to point out that data transmission over the Internet (e.g. when communicating by e-mail) can have security gaps. Complete protection of data against access by third parties is not possible.

Note on the responsible body

The controller responsible for data processing on this website is

Oris SA
Ribigasse 1 
4434 Hölstein, Switzerland

Phone: +41 61 956 11 11

 E-mail: legal@oris.ch

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, e-mail addresses, etc.).

Storage duration

Unless a more specific storage period has been specified in this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you assert a justified request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, the deletion will take place after these reasons no longer apply.

General information on the legal basis for data processing on this website

If you have consented to data processing, we process your personal data on the basis of Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, insofar as special categories of data are processed in accordance with Art. 9 para. 1 GDPR. In the event of express consent to the transfer of personal data to third countries, data processing is also carried out on the basis of Art. 49 para. 1 lit. a GDPR. Consent can be revoked at any time. If your data is required for the fulfilment of a contract or for the implementation of pre-contractual measures, we process your data on the basis of Art. 6 para. 1 lit. b GDPR. Furthermore, we process your data if this is necessary to fulfil a legal obligation on the basis of Art. 6 para. 1 lit. c GDPR. Data processing may also be carried out on the basis of our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR. Information on the relevant legal bases in each individual case is provided in the following paragraphs of this privacy policy.

International data transfers

Our service providers and their authorised subprocessors may process personal data outside Switzerland and the European Economic Area, including in the United States. The service-specific information and provider notices below describe recipients and their international operations.

Where a destination benefits from an applicable adequacy decision, we rely on that decision within its scope. For transfers to US organisations, this may include the Swiss-US Data Privacy Framework or the EU-US Data Privacy Framework, but only where the relevant recipient has an active certification covering the transfer. These frameworks do not cover all US companies or all processing automatically.

Where no applicable adequacy decision covers a transfer, we use appropriate safeguards, such as the European Commission’s standard contractual clauses with the necessary Swiss adaptations and supplementary measures where required, or another legally permitted mechanism. You may request information about the safeguards, or a copy subject to appropriate redactions, from legal@oris.ch.

Recipients of personal data

As part of our business activities, we work together with various external organisations. In some cases, it is also necessary to transfer personal data to these external organisations. We only pass on personal data to external bodies if this is necessary for the fulfilment of a contract, if we are legally obliged to do so (e.g. passing on data to tax authorities), if we have a legitimate interest in the transfer in accordance with Art. 6 para. 1 lit. f GDPR or if another legal basis permits the transfer of data. When using processors, we only pass on our customers' personal data on the basis of a valid contract for order processing. In the case of joint processing, a joint processing agreement is concluded.

Revocation of your consent to data processing

Many data processing operations are only possible with your express consent. You can withdraw your consent at any time. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Right to object to the collection of data in special cases and to direct marketing (Art. 21 GDPR)

IF THE DATA PROCESSING IS BASED ON ART. 6 ABS. 1 LIT. E OR F GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS OR THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 21 PARA. 1 GDPR).

IF YOUR PERSONAL DATA ARE PROCESSED FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING; THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR THE PURPOSE OF DIRECT MARKETING (OBJECTION PURSUANT TO ART. 21 PARA. 2 GDPR).

Right to lodge a complaint with the competent supervisory authority

You may contact the Swiss Federal Data Protection and Information Commissioner at https://www.edoeb.admin.ch/en. Where the GDPR applies, you also have the right to lodge a complaint with a supervisory authority under Article 77 GDPR, in particular in the country of your habitual residence, place of work or the alleged infringement. This does not affect your other administrative or judicial remedies.

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a commonly used, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done insofar as it is technically feasible.

Information, correction and deletion

Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipient and the purpose of the data processing and, if necessary, a right to correction or deletion of this data. You can contact us at any time if you have further questions on the subject of personal data.

Right to restriction of processing

You have the right to request the restriction of the processing of your personal data. You can contact us at any time to do this. The right to restriction of processing exists in the following cases:

• If you dispute the accuracy of your personal data stored by us, we generally need time to check this. For the duration of the review, you have the right to request that the processing of your personal data be restricted.
• If the processing of your personal data was/is unlawful, you can request the restriction of data processing instead of erasure.
• If we no longer need your personal data, but you need it for the exercise, defence or assertion of legal claims, you have the right to request the restriction of the processing of your personal data instead of its erasure.
• If you have lodged an objection in accordance with Art. 21 (1) GDPR, a balance must be struck between your interests and ours. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.
• If you have restricted the processing of your personal data, this data - apart from its storage - may only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of Switzerland, the European Union or a Member State.

SSL or TLS encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

TLS encryption helps protect data during transmission; it does not eliminate every security risk.

Encrypted payment transactions on this website

If there is an obligation to provide us with your payment data (e.g. account number for direct debit authorisation) after the conclusion of a contract with costs, this data is required for payment processing.

Payment transactions via the usual means of payment (Visa/MasterCard, direct debit) are made exclusively via an encrypted SSL or TLS connection. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

Encryption helps protect payment information during transmission.

Objection to advertising e-mails

We hereby object to the use of contact data published as part of our obligation to provide a legal notice for the purpose of sending unsolicited advertising and information material. The operators of this website expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as spam e-mails.

3. Data collection on this website

Cookies and similar technologies

We use cookies, pixels, browser storage and similar technologies to operate our website, provide requested functions, understand website use and measure or personalise advertising. Session cookies expire at the end of a session; persistent cookies expire after their specified lifetime or can be deleted earlier through your browser.

Technologies strictly necessary to provide a service you request, maintain essential security or record your consent choices are distinguished from optional analytics, advertising and embedded third-party content. Measuring audiences or optimising advertising does not, by itself, make a technology strictly necessary.

Optional technologies described below are used on the basis of your consent. Where the GDPR applies, the legal basis for the associated personal-data processing is Article 6(1)(a). You can refuse optional services and change or withdraw consent through our website’s privacy settings at any time. Withdrawal does not affect processing that was lawful before withdrawal. Blocking an optional service may prevent the corresponding map, video or social feature from being displayed.

Strictly necessary processing is based, as appropriate, on contractual necessity, legal obligations or our legitimate interests in delivering a secure, functioning website. Applicable device-access rules are assessed separately.

Our privacy settings provide service-level information on purposes, providers and cookie or storage lifetimes. Cookie expiry is different from the retention of information already transmitted to a provider. Server-side tracking and hashed identifiers may still involve personal data and are subject to the applicable privacy requirements.

Consent with Usercentrics

This website uses the consent management technology provided by Usercentrics to obtain, manage and document your consent to certain cookies and other technologies.

The provider is:

Usercentrics GmbH
Sendlinger Strasse 7
80331 Munich
Germany

https://usercentrics.com/

When you use our website, the following information may be transmitted to Usercentrics:

• Consent given or withdrawn
• Your IP address
• Browser and device information
• Time of access
• Location information, where applicable

Usercentrics may store an identifier in your browser to recognise your choices.

Consent records are retained for as long as necessary to document consent and comply with applicable accountability obligations. Deleting a browser cookie does not necessarily remove consent records that have already been stored.

We use Usercentrics to document required consent and fulfil legal obligations. Where the GDPR applies, the associated processing for documenting compliance is generally based on Art. 6(1)(c) GDPR.

Server log files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are

• Browser type and browser version
• Operating system used
• Referrer URL
• Host name of the accessing computer
• Time of the server request
• IP address

This data is not merged with other data sources.

This data is collected on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of its website - the server log files must be recorded for this purpose.

Contact form

If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. We may use service providers acting on our behalf to process your enquiry, as described in this policy.

This data is processed on the basis of Art. 6 para. 1 lit. b GDPR if your enquiry is related to the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the enquiries addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR) if this has been requested; consent can be revoked at any time.

We will retain the data you provide on the contact form until you request its deletion, revoke your consent for its storage, or the purpose for its storage no longer pertains (e.g. after fulfilling your request). Mandatory statutory provisions - in particular retention periods - remain unaffected.

Enquiry by e-mail, telephone

If you contact us by e-mail or telephone, your enquiry, including all resulting personal data (name, enquiry), will be stored and processed by us for the purpose of processing your request. We may use service providers acting on our behalf to process your enquiry, as described in this policy.

This data is processed on the basis of Art. 6 para. 1 lit. b GDPR if your enquiry is related to the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the enquiries addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR) if this has been requested; consent can be revoked at any time.

The data you send to us via contact requests will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory statutory provisions - in particular statutory retention periods - remain unaffected.

Microsoft Bookings

We may use Microsoft Bookings to arrange appointments.

The provider is:

Microsoft Ireland Operations Limited
One Microsoft Place
South County Business Park
Leopardstown
Dublin 18
Ireland

The information provided, particularly contact details, the requested appointment and any additional booking information, is used to plan, conduct and follow up on the appointment.

The data is processed through the Microsoft systems used for this purpose.

Where applicable, processing is based on our legitimate interest in providing a convenient appointment booking service (Art. 6(1)(f) GDPR), a contractual relationship or consent obtained from you.

International data transfers are subject to Chapter 2.

Further information: https://privacy.microsoft.com/privacystatement

Registration on this website

You can register on this website in order to use additional functions on the site. We will only use the data you enter for the purpose of using the respective offer or service for which you have registered. The mandatory information requested during registration must be provided in full. Otherwise we will refuse your registration.

In the event of important changes, for example to the scope of the offer or technically necessary changes, we will use the e-mail address provided during registration to inform you in this way.

The data entered during registration is processed for the purpose of implementing the user relationship established by the registration and, if necessary, for the initiation of further contracts (Art. 6 para. 1 lit. b GDPR).

The data collected during registration will be stored by us for as long as you are registered on this website and will then be deleted. Statutory retention periods remain unaffected.

4. Social media

a) Facebook https://www.facebook.com/ORIS/

You can access the Facebook social media network via external links on our website. All functions in the social media network are offered by Facebook, 4 Grand Canal Square, Dublin 2, Ireland. The Facebook channels can only be accessed via an external link.

If you are logged into Facebook with your own profile and access our social media channel, Facebook can assign your visit to your logged-in profile. If you do not wish your user account to be associated with your IP address, please log out of your Facebook account before using our website.

For more information on the processing of your data, please refer to Facebook's privacy policy: https://www.facebook.com/privacy/explanation and to our "Facebook Fanpage" data policy.

b) Instagram http://instagram.com/oris/

No functions and content of the Instagram service, offered by Instagram Inc, 1601 Willow Road, Menlo Park, CA, 94025, USA, are integrated into our online offering. The Instagram channels are only accessible via an external link.

We would like to point out that we have no influence on the content and scope of use of the data collected by Instagram. For further information in this regard, please refer to the Instagram pages at: http://instagram.com/about/legal/privacy/

c) LinkedIn 

The "Tracking via Insight Tag" function of the LinkedIn service, offered by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, is integrated into our online offering with your consent. The LinkedIn channels and their content can only be accessed via an external link.

We would like to point out that we have no influence on the content and scope of use of the data collected by LinkedIn. For further information in this regard, please refer to LinkedIn's privacy policy: https://www.linkedin.com/legal/privacy-policy.

You can deregister here: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

d) Sina Weibo http://weibo.com/orischina/

No functions and content of the Sina Weibo service, offered by Sina Corporation, United Plaza, 1468 Nan Jing Road West, Shanghai, China, are integrated into our online offering. The Weibo channels are only accessible via an external link and we would like to point out that we have no influence on the content and scope of use of the data collected by Sina Weibo. For further information in this regard, please refer to Sina Weibo's privacy policy: https://m.weibo.cn/page/647?entry=client.

e) Youku http://i.youku.com/u/UNDc0Nzk0NDky/

No functions and content of the Youku service, offered by Youku Tudou Inc. in Beijing, China, are integrated into our online offering. The Youku channels are only accessible via an external link.

We would like to point out that we have no influence on the content and scope of use of the data collected by Youku. For further information in this regard, please refer to Youku's privacy policy: https://h5.m.youku.com/app/flsm.html

f) X       https://twitter.com/oriswatches 

No functions and content of the "X" service, offered by Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland, are integrated into our online offering. The X channels are only accessible via an external link.

We would like to point out that we have no influence on the content and scope of use of the data collected by "X". For further information in this regard, please refer to the privacy policy of "X": https://twitter.com/privacy 

g) Pinterest     http://pinterest.com/oris/

No functions and content of the Pinterest service, offered by Pinterest Europe Ltd, Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland, are integrated into our online offering. The Pinterest channels are only accessible via an external link.

We would like to point out that we have no influence on the content and scope of use of the data collected by Pinterest. For further information in this regard, please refer to Pinterest's privacy policy: https://policy.pinterest.com/privacy-policy 

5. Analysis tools and advertising

Common information for optional analytics and advertising

With your consent, the services below help us understand website use, attribute visits or purchases to advertisements, measure campaigns, build advertising audiences and improve the relevance of advertising. Where the GDPR applies, our consent-based processing relies on Article 6(1)(a). You may withdraw consent through our privacy settings.

Depending on the service and enabled configuration, technical and event information can include IP addresses, browser and device details, page URLs and referrers, timestamps, cookie or browser identifiers, ad-click references, and interactions such as product views, additions to the cart and purchases. Purchase events may include product references, transaction identifiers, currency and order value. The paragraphs below identify service-specific purposes and data. Personalisation may involve profiling of interests or behaviour for advertising.

Advertising providers may match events with information they already hold and process them for their own purposes under their notices and applicable terms. Reports provided to Oris may be aggregated; this does not mean the underlying data is anonymous. Hashing contact information is a protection measure and does not by itself make the information anonymous.

We retain information only for as long as required for the stated purposes, applicable reporting or attribution periods and legal obligations. Provider retention and cookies are subject to their service terms and our account settings.

Google Tag Manager

We use Google Tag Manager, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to manage website tags. Loading the tag-management infrastructure involves technical requests, including transmission of an IP address. The purposes and consent requirements of the tags it deploys remain separate. Our interest in managing website code does not authorise optional tracking before consent. Where applicable, necessary tag-management processing is based on Article 6(1)(f) GDPR. Provider information: https://policies.google.com/privacy .

Google Analytics 4

We use Google Analytics 4 (GA4), provided by Google Ireland Limited, to measure website activity and e-shop performance. This includes page and product views, interactions, traffic sources, browser and device information, approximate location, and purchase events such as transaction IDs and order values. Cookies or comparable identifiers help distinguish sessions and returning browsers. We use the resulting statistics to improve our website and assess marketing performance.

Google states that GA4 does not log or store individual IP addresses; IP addresses are used at collection for functions such as deriving approximate location. This replaces the old description of an optional IP-truncation setting. It does not make all GA4 data anonymous.

Google signals can support advertising and cross-device reporting using data from signed-in Google users who have enabled the relevant personalisation settings. Oris does not receive a person’s individual Google search or YouTube history through GA4.

Provider information: https://support.google.com/analytics/answer/6004245 and https://policies.google.com/privacy . Google’s analytics opt-out tool is available at https://tools.google.com/dlpage/gaoptout . Our privacy settings remain available independently of that tool.

Google Ads and related advertising services

We use Google Ads, including conversion measurement and remarketing, provided by Google Ireland Limited. This enables us to promote Oris through Google’s advertising services, assess actions following advertising interactions, and show relevant advertisements to people who have visited our website. Data can include ad-click identifiers, page and event information, browser or device identifiers and purchase values. Google may associate these signals with its own information according to the user’s settings and applicable terms.

The Usercentrics names Google AdServices, DoubleClick Ad and Google Syndication may identify components or delivery domains within Google’s advertising infrastructure. They are covered here to the extent used for ad delivery, measurement or personalisation; each actual product must be identified in the service settings. A domain name alone does not establish that Oris operates Google AdSense or publishes third-party advertisements.

Customer Match involves submitting selected customer contact information to Google to match audiences. Enhanced conversions supplement conversion events with normalised, hashed contact information.

Provider information: https://policies.google.com/technologies/ads and https://policies.google.com/privacy . Advertising preferences: https://myadcenter.google.com/ .

Meta Pixel

We use Meta Pixel, listed as Facebook Pixel in our privacy settings, provided by Meta Platforms Ireland Limited, Ireland, to measure advertising outcomes, optimise campaigns and form audiences for relevant advertising on Meta services. The pixel can transmit page and conversion events, device and browser information, IP addresses and identifiers. Meta may associate these events with a Facebook or Instagram account and use them as described in its privacy notice.

Advanced matching can transmit normalised and hashed customer information to improve attribution and audience matching.

For collection and transmission covered by Meta’s controller addendum, Oris and Meta act as joint controllers within the scope set out in that agreement. Subsequent processing is governed by Meta’s responsibilities and terms. You may exercise applicable rights with either party for joint processing; Oris remains available at legal@oris.ch.

Information: https://www.facebook.com/privacy/policy/ ; https://www.facebook.com/legal/controller_addendum ; https://www.facebook.com/ads/preferences/ .

TikTok advertising and measurement

We use TikTok advertising technology to measure campaign performance, attribute website interactions to advertising and develop audiences for relevant advertising. The TikTok Pixel can send device and browser details, IP addresses, identifiers, visited pages and configured events, such as product views, cart additions and purchases. TikTok may associate these events with information it holds about a user and use them under its privacy notice and business terms.

The applicable TikTok entities and data-transfer arrangements depend on the service and territory.

Information: https://ads.tiktok.com/resources/help/article/tiktok-pixel and https://www.tiktok.com/legal/page/eea/privacy-policy/en .

Pinterest advertising and Pinterest Tag

We use Pinterest advertising and Pinterest Tag to measure website events and advertising results and create audiences for relevant advertising. Pinterest can receive IP addresses, browser and device details, identifiers, visited pages and configured conversion events, including product and purchase information. It may connect this information to a Pinterest account. Pinterest Europe Ltd., Ireland, and Pinterest, Inc., United States, describe their respective roles in their privacy notice.

Information: https://policy.pinterest.com/en/privacy-policy and https://help.pinterest.com/en/business/article/pinterest-tag-parameters… .

LinkedIn Insight Tag

We use LinkedIn Insight Tag, provided by LinkedIn Ireland Unlimited Company, to measure campaign outcomes, understand the professional composition of our audience in reports and retarget website visitors. The tag collects page URL, referrer, IP address, browser and device details and timestamps. LinkedIn may connect visits with member information; its reports to us do not identify individual members.

LinkedIn states that direct identifiers are removed within seven days and remaining pseudonymised Insight Tag data is deleted within 180 days. These are provider-stated periods, separate from Oris’s report retention and cookie lifetimes.

Information: https://www.linkedin.com/help/lms/answer/a427660 and https://www.linkedin.com/legal/privacy-policy . This advertising tag is separate from a LinkedIn content plugin described in section 4.

Microsoft Clarity

We use Microsoft Clarity to understand how visitors interact with our website through behavioural metrics, heatmaps and session replay. Data may include viewed pages, clicks, scrolling, browser and device details, IP-derived location and identifiers from cookies or similar technologies. These insights help improve usability, website performance and our marketing. Microsoft may also use collected information for purposes described in its privacy statement, including advertising and security.

Clarity’s masking settings affect the content visible in recordings.

Information: https://learn.microsoft.com/en-us/clarity/setup-and-installation/privac… and https://privacy.microsoft.com/en-us/privacystatement .

Microsoft Advertising and Bing

We use Microsoft Advertising to promote Oris and assess advertising performance. Where Universal Event Tracking (UET) is deployed, it can send website activity, browser and device details, IP addresses, identifiers and configured conversion events to Microsoft to measure results and support remarketing. Bing is part of Microsoft’s advertising services; this processing is distinct from Microsoft Bookings, Teams and Clarity.

Information: https://privacy.microsoft.com/en-us/privacystatement .

Teads

We use Teads advertising and measurement technology to measure website visits and conversions, assess advertising effectiveness and manage relevant advertising audiences, including retargeting or campaign exclusions where configured. Technical and event data may include IP addresses, cookie or device identifiers, page URLs, browser and operating-system details, advertising interactions and configured conversion events.

These identifiers and linked events may constitute personal data. The pixel is therefore not described as exchanging no personal data, and a Teads cookie created elsewhere is not treated as consent to all processing on our website. Our use follows the consent approach in section 3.

Information: https://privacy-policy.teads.com/ .

Tracify

We use Tracify, provided by Tracify GmbH, Germany, for marketing attribution and analysis of the relationship between advertising interactions and website or e-shop activity. Depending on the integration, technical signals and event data may include IP addresses, browser information, page and campaign references, purchase data and pseudonymous or hashed identifiers used to link interactions.

Server-side collection, cookie-free processing or hashing does not by itself remove personal-data obligations. Our consent-based approach for optional attribution is described in section 3.

Information: https://tracify.ai/rechtliches and https://tracify.ai/datenschutz .

OpenAI advertising measurement for ChatGPT Ads

We use the OpenAI advertising measurement pixel to assess the effectiveness of Oris advertising in ChatGPT. Configured website events are sent to OpenAI to attribute actions to advertisements and help optimise campaigns. The pixel can use advertising-click references and browser identifiers stored in first-party cookies, together with event information such as page or product interactions and purchases. This is advertising measurement on our website; it does not give Oris access to visitors’ private ChatGPT conversations.

OpenAI’s documentation also describes automatic advanced matching, which can detect supported customer information, hash it in the browser and send the hashes with events when enabled.

The current pixel documentation describes __oppref cookies with a 30-day lifetime after writing and __obref cookies with a 365-day lifetime after creation. Verify these against the deployed version; these periods do not establish server-side event retention.

Information: https://help.openai.com/en/articles/20001409-conversion-measurement and https://developers.openai.com/ads/measurement-pixel .

Reddit Ads, Reddit Pixel and Conversions API

If we advertise on Reddit and use the associated measurement technologies, we may use the Reddit Pixel and, where applicable, the Reddit Conversions API (CAPI) to track which actions visitors take on our website after interacting with our advertisements. This data may be used to measure campaign performance, attribute conversions, optimise advertising and create relevant audiences for remarketing.

Depending on the implementation, technical data such as IP addresses, browser and device information, referrer and page URLs, advertising click identifiers, as well as events such as page views, product views, searches, additions to the cart, registrations or purchases, may be transmitted to Reddit or the Reddit entity responsible under the applicable contractual agreements. These events may also include product information, currency, purchase value and transaction identifiers.

When using a server-side Conversions API, additional matching identifiers may be used depending on the configuration, such as hashed contact information, IP addresses, user agents or click IDs. Reddit may process this data in accordance with its contractual terms and privacy policy and match it with information it already holds. The consent requirements described in Section 3 apply to optional advertising measurement.

Further information: Reddit Pixel · Reddit Conversions API · Reddit Privacy Policy.

Amazon Advertising

We use Amazon advertising technology to measure advertising results and support relevant advertising audiences. Depending on the configured tag, Amazon may receive website or conversion events, IP addresses, browser and device information, identifiers and event parameters such as product and purchase information.

Information: https://advertising.amazon.com/legal/product-terms . The final notice must link the privacy notice applicable to the contracted Amazon Ads product.

X advertising and analytics

We use X advertising and analytics technology, listed in our privacy settings as Twitter Advertising and Twitter Analytics, to measure advertising performance and website activity and support relevant advertising audiences. X can receive identifiers, IP addresses, device and browser information, page visits and configured conversion events, and may associate them with information it holds.

Information: https://x.com/en/privacy and https://business.x.com/en/help/ads-policies/campaign-considerations/policies-for-conversion-tracking-and-custom-audiences 

 6. Newsletter

Newsletter data

If you would like to receive the newsletter offered on the website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. No further data is collected, or only on a voluntary basis. We use the newsletter service providers described below to process the newsletter.

Mailchimp 

This website uses the services of Mailchimp to send newsletters. The provider is Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA.

Mailchimp is a service that can be used to organise and analyse the sending of newsletters, among other things. If you enter data for the purpose of subscribing to the newsletter (e.g. email address), this data is stored on Mailchimp's servers in the USA.

With the help of Mailchimp, we can analyse our newsletter campaigns. When you open an email sent with Mailchimp, a file contained in the email (known as a web beacon) connects to Mailchimp's servers in the USA. This makes it possible to determine whether a newsletter message has been opened and which links, if any, have been clicked on. Technical information is also collected (e.g. time of access, IP address, browser type and operating system). Open and click information may be linked to an individual subscriber, depending on the enabled tracking settings. We use it to evaluate newsletter engagement and improve future communications.  The results of these analyses can be used to better adapt future newsletters to the interests of the recipients.

If you do not wish to be analysed by Mailchimp, you must unsubscribe from the newsletter. We provide a corresponding link for this purpose in every newsletter message.

The data processing takes place on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time by unsubscribing from the newsletter. The legality of the data processing operations that have already taken place remains unaffected by the cancellation.

The data you provide us with for the purpose of subscribing to the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter and deleted from the newsletter distribution list after you unsubscribe from the newsletter. Data stored by us for other purposes remains unaffected by this.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://mailchimp.com/eu-us-data-transfer-statement/ and https://mailchimp.com/legal/data-processing-addendum/#Annex_C_-_Standar….

After you unsubscribe from the newsletter distribution list, your e-mail address may be stored by us or the newsletter service provider in a blacklist if this is necessary to prevent future mailings. The data from the blacklist will only be used for this purpose and will not be merged with other data. This serves both your interest and our interest in complying with the legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR). We retain suppression information for as long as needed to respect your unsubscribe request and review its necessity periodically. You can object to the storage if your interests outweigh our legitimate interest.

For more information, please refer to Mailchimp's privacy policy at: https://www.intuit.com/privacy/statement/.

International transfers are subject to the safeguards described in section 2.

7. Plugins and tools

YouTube videos

We embed YouTube videos, provided through Google Ireland Limited, Ireland. Once you activate this optional service, connections to Google or YouTube can transmit IP addresses, browser and device information, the page visited and playback interactions. Cookies or similar technologies may be used, and a signed-in account may allow Google to associate activity with that account.

Where privacy-enhanced embedding is configured, it changes certain uses of viewing data but does not make the player free of personal-data processing. Activation follows the consent approach in section 3.

Information: https://policies.google.com/privacy .

Google Maps

We use Google Maps, provided by Google Ireland Limited, to display locations such as retailers and service centres. Activating a map establishes connections to Google and can transmit your IP address, browser and device information and the page accessed. Location information is processed if you choose to provide it through your device or browser. Supporting resources may also be loaded. Optional map activation follows section 3. Information: https://policies.google.com/privacy .

Google reCAPTCHA

We use Google reCAPTCHA to help distinguish human requests from automated activity and protect forms against misuse. Depending on the version, Google processes technical and interaction information such as IP address, browser and device signals, timing and interaction patterns to evaluate requests. Cookies or comparable technologies may be involved.

Where strictly necessary for proportionate security measures, the associated personal-data processing is based on our legitimate interest in protecting the website under Article 6(1)(f) GDPR. This does not automatically establish an exemption from device-access consent requirements.

Information: https://developers.google.com/recaptcha/docs/faq and https://policies.google.com/privacy .

Google Hosted Libraries and gstatic resources

Our website uses externally hosted resources, including Google Hosted Libraries and resources delivered through gstatic.com, to provide supporting code or content. Fetching a resource transmits technical request information, such as an IP address, browser information, requested resource and potentially a referrer, to the serving provider. gstatic.com is a delivery domain and does not by itself identify a separate processing purpose.

Information: https://developers.google.com/speed/libraries and https://policies.google.com/privacy .

Datadog Real User Monitoring

We use Datadog Real User Monitoring (RUM) to identify technical errors and understand website performance. Depending on configuration, it can collect page and resource loading times, error information, URLs, browser and device details, session identifiers, interactions and IP or location information. We use these data to diagnose problems and improve reliability.

Information: https://docs.datadoghq.com/data_security/real_user_monitoring/ and https://www.datadoghq.com/legal/privacy/ .

Rokka image delivery

We use Rokka to process and deliver website images. When your browser requests an image, the image-delivery infrastructure processes the technical information needed to respond, including your IP address, requested resource, time and browser request information. Necessary processing for image delivery and operational security is based on our legitimate interest in operating a reliable website under Article 6(1)(f) GDPR where applicable.

Service information: https://rokka.io/ . Insert the applicable provider privacy notice and contractual details after confirmation.

Baidu Maps

For the regional offering where it is available, we use Baidu Maps, operated by Baidu in China. Activating the map can transfer technical information, including IP address and website-use information, to China. The service follows the applicable consent and international-transfer requirements; merely being outside the EU or EEA does not remove Swiss data-protection duties.

Zendesk

We use Zendesk to provide help-centre and FAQ functions and process relevant enquiries. Depending on the interaction, data include search terms, enquiry content, contact details you provide and technical connection information. Processing is based on contractual necessity for contract-related requests or our legitimate interest in responding to enquiries and operating support services. Optional tracking within support functions is assessed separately.

Information: https://www.zendesk.com/company/agreements-and-terms/privacy-notice/ .

8. eCommerce and payment providers

Processing of customer and contract data

We collect, process and use personal customer and contract data to establish, organise the content of and amend our contractual relationships. For contractual service delivery, we process usage data as necessary to provide or bill for the service. Separate optional analytics and advertising processing is described in section 5. The legal basis for this is Art. 6 para. 1 lit. b GDPR.

The customer data collected will be deleted after completion of the order or termination of the business relationship and expiry of any existing statutory retention periods. Statutory retention periods remain unaffected.

Data transmission upon conclusion of a contract for online shops, retailers and dispatch of goods

If you order goods from us, we will pass on your personal data to the transport company entrusted with the delivery and to the payment service provider commissioned to process the payment. Only the data required by the respective service provider to fulfil its task will be disclosed. The legal basis for this is Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures. If you have given your consent in accordance with Art. 6 para. 1 lit. a GDPR, we will pass on your e-mail address to the transport company entrusted with the delivery so that it can inform you by e-mail about the dispatch status of your order; you can revoke your consent at any time.

Credit checks

In the case of a purchase on account or another payment method for which we make advance payment, we may carry out a credit check (scoring). For this purpose, we transmit the data you enter (e.g. name, address, age or bank details) to a credit agency. The probability of a payment default is determined on the basis of this data. If the risk of non-payment is too high, we may refuse the payment method in question.

The credit check is carried out on the basis of contract fulfilment (Art. 6 para. 1 lit. b GDPR) and to avoid payment defaults (legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR). If consent has been obtained, the credit check is carried out on the basis of this consent (Art. 6 para. 1 lit. GDPR); consent can be revoked at any time.

Payment services

We integrate payment services from third-party companies on our website. When you make a purchase from us, your payment details (e.g. name, payment amount, account details, credit card number) are processed by the payment service provider for the purpose of payment processing. The respective contractual and data protection provisions of the respective providers apply to these transactions. The payment service providers are used on the basis of Art. 6 para. 1 lit. b GDPR (contract processing) and in the interest of a smooth, convenient and secure payment process (Art. 6 para. 1 lit. f GDPR). Insofar as your consent is requested for certain actions, Art. 6 para. 1 lit. a GDPR is the legal basis for data processing; consent can be revoked at any time for the future.

We use the following payment services / payment service providers on this website:

Apple Pay

The provider of the payment service is Apple Inc, Infinite Loop, Cupertino, CA 95014, USA. You can find Apple's privacy policy at: https://www.apple.com/legal/privacy.

Google Pay

The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. You can find Google's privacy policy here: https://policies.google.com/privacy.

Stripe

The provider for customers within the EU is Stripe Payments Europe, Ltd, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland (hereinafter referred to as "Stripe").

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://stripe.com/privacy and https://stripe.com/guides/general-data-protection-regulation.

You can find details on this in Stripe's privacy policy at the following link: https://stripe.com/privacy.

Klarna

The provider is Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter referred to as "Klarna"). Klarna offers various payment options (e.g. instalment purchase). If you choose to pay with Klarna (Klarna checkout solution), Klarna will collect various personal data from you. Klarna uses cookies to optimise the use of the Klarna checkout solution. Details on the use of Klarna cookies can be found at the following link: https://cdn.klarna.com/1.0/shared/content/policy/cookie/de_de/checkout….

Details can be found in Klarna's privacy policy at the following link: https://www.klarna.com/de/datenschutz/.

PayPal

When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if available - "Purchase on account" or "Installment" via PayPal we give your payment details within the framework of the payment on the PayPal (Europe) S.a.r.l.. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereafter "PayPal"), further. The data is passed on in accordance with Art. 6 para. 1 lit. b GDPR and only insofar as this is necessary for payment processing. PayPal reserves the right to conduct a credit check for the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" via PayPal. For this purpose, your payment data will be processed, if necessary, in accordance with Art. 6 para. 1 lit. f GDPR on the basis of PayPal's legitimate interest in determining your solvency. PayPal uses the result of the credit check with respect to the statistical probability of debt default for the purpose of deciding on providing the respective payment method. The credit information may contain probability values ​​(so-called. score values). When score values are ​​included in the results of the credit check, they are based on a scientifically recognised mathematical and statistical method. The calculation of the score values includes, but is not limited to, address data. Please refer to the Privacy Policy of PayPal for further information on data protection law, including the credit agencies used. You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.

American Express

The provider of this payment service is American Express Europe S.A., Theodor-Heuss-Allee 112, 60486 Frankfurt am Main, Germany (hereinafter referred to as "American Express").

American Express may transfer data to its parent company in the USA. The data transfer to the USA is based on the Binding Corporate Rules. Details can be found here: https://www.americanexpress.com/en-pl/company/legal/privacy-centre/euro….

Further information can be found in the American Express privacy policy: https://www.americanexpress.com/de/legal/online-datenschutzerklarung.ht….

Mastercard

The provider of this payment service is Mastercard Europe SA, Chaussée de Tervuren 198A, B-1410 Waterloo, Belgium (hereinafter referred to as "Mastercard").

Mastercard may transfer data to its parent company in the USA. The data transfer to the USA is based on Mastercard's Binding Corporate Rules. Details can be found here: https://www.mastercard.de/de-de/datenschutz.html and https://www.mastercard.us/content/dam/mccom/global/documents/mastercard-bcrs.pdf.

VISA

The provider of this payment service is Visa Europe Services Inc, London Branch, 1 Sheldon Square, London W2 6TT, United Kingdom (hereinafter referred to as "VISA").

Transfers to the United Kingdom are assessed under the applicable adequacy decisions and safeguards described in section 2.

VISA may transfer data to its parent company in the USA. The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.visa.de/nutzungsbedingungen/visa-globale-datenschutzmitteil….

Further information can be found in VISA's privacy policy: https://www.visa.de/nutzungsbedingungen/visa-privacy-center.html.

TWINT

TWINT AG (TWINT), Stauffacherstrasse 41, 8004 Zurich, is the operator of the in-app solution TWINT ID and is therefore responsible for collecting, processing and using your personal data and for ensuring that data processing complies with applicable data protection laws. TWINT ID is a service provided independently by TWINT and not by the bank that issues your TWINT app (issuer bank). The issuer bank is not responsible for data processing. It has no influence over data processing and no access to your personal data that is collected and processed in TWINT ID.To understand what personal data we collect from you and the purposes for which we use it, please refer to the Privacy Policy of TWINT.Information on the processing of your personal data during general use of TWINT can be found in the Privacy Policy of your TWINT app.

9. Audio and video conferencing

Data processing

We use online conferencing tools, among others, to communicate with our customers. The individual tools we use are listed below. If you communicate with us by video or audio conference via the internet, your personal data will be collected and processed by us and the provider of the respective conference tool.

The conference tools collect all data that you provide/enter to use the tools (email address and/or your telephone number). The conference tools also process the duration of the conference, the start and end (time) of participation in the conference, the number of participants and other "contextual information" in connection with the communication process (metadata).

Furthermore, the provider of the tool processes all technical data required to handle online communication. This includes, in particular, IP addresses, MAC addresses, device IDs, device type, operating system type and version, client version, camera type, microphone or loudspeaker and the type of connection.

If content is exchanged, uploaded or provided in any other way within the tool, it is also stored on the tool provider's servers. Such content includes, in particular, cloud recordings, chat/instant messages, voicemails, uploaded photos and videos, files, whiteboards and other information that is shared while using the service.

Please note that we do not have full control over the data processing operations of the tools used. Our options are largely determined by the company policy of the respective provider. Further information on data processing by the conference tools can be found in the data protection declarations of the tools used, which we have listed below this text.

Purpose and legal basis

The conference tools are used to communicate with prospective or existing contractual partners or to offer certain services to our customers (Art. 6 para. 1 lit. b GDPR). Furthermore, the use of the tools serves the general simplification and acceleration of communication with us or our company (legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR). If consent has been requested, the tools in question are used on the basis of this consent; consent can be withdrawn at any time with effect for the future.

Storage duration

The data collected directly by us via the video and conference tools will be deleted from our systems as soon as you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies. Stored cookies remain on your end device until you delete them. Mandatory statutory retention periods remain unaffected.

We have no influence on the storage period of your data, which is stored by the operators of the conference tools for their own purposes. For details, please contact the operators of the conference tools directly.

Conference tools used

We use the following conference tools:

Microsoft Teams

We use Microsoft Teams. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Details on data processing can be found in the Microsoft Teams privacy policy: https://privacy.microsoft.com/privacystatement.

International transfers are subject to the safeguards described in section 2.

Legal Notice Based on the Act on Specified Commercial Transactions

【Name of Seller】

ORIS Japan KK.

【Representative】

President & CEO: Pleitavino Roberto

【Seller’s Address】

4-3-14 Ginza, Chuo-ku, Tokyo 104-0061

【Seller’s Phone Number】

ORIS Japan KK.
Tel: 03-6260-6876
Business hours: Monday to Friday, 09:30–18:30 (excluding weekends, holidays, and New Year holidays)

【Sales Price】

Prices are shown individually for each product.

【Additional Fees】

Shipping: Free of charge

【Order Method】

To purchase a product, click “Add to Shopping Bag” on the product detail page and proceed to checkout. 

【Payment Methods】

At the moment, we only accept major credit/debit cards, including Mastercard, Visa and American Express. We also accept Google Pay, Apple Pay, Klarna and PayPal. At the checkout, additional payment methods may be available, while certain payment methods may be unavailable. In any event, the available supported payment methods are shown to you at the checkout page and are subject to the conditions specified by each payment method provider.

【Shipping】

All orders are shipped via UPS. A tracking number will be provided to you upon shipment.
All watches will be shipped free of charge direct from Oris’s headquarters in Hölstein, Switzerland. 

【Returns】

Customer satisfaction is Oris’s first goal. If you are not satisfied with your purchase, you may return any unworn, undamaged merchandise purchased online from www.oris.ch by courier service within 14 days of delivery for a full refund of the purchase price. The merchandise must be of original quality and undamaged. Any watch that is not returned with the original seal unbroken or fails quality inspection from customer service (e.g. if it is scratched, worn or damaged) will be returned to you and no refund will be issued. Watches with rubber straps that are sized (i.e. cut) are not returnable.

【Personal Information】

Please refer to our website’s Privacy Policy.

プライバシーポリシー | Oris

Hong Kong Service Center Registration Number

Oris Hong Kong Service Center
Registration No.: A-B-25-09-09802