As of: 31.08.2026

The protection of your personal data is important to us. Below, we inform you about which data we process, for what purpose and on what legal basis this is done, to whom we pass on data, and what rights you are entitled to.

1. Controller

BZONE Establishment, trading under the brand name myona
Am Nendler Weg 14
9498 Planken
Principality of Liechtenstein

E-mail: info@myona.li
Website: MYONA

For questions regarding data protection and the exercise of your rights, please contact info@myona.li.

A data protection officer has not been appointed, as the legal requirements for this are not met.

2. Applicable Law

We are based in the Principality of Liechtenstein. Liechtenstein is a member of the European Economic Area (EEA); the General Data Protection Regulation (GDPR) applies here directly, supplemented by the Liechtenstein Data Protection Act (DSG-FL). For the use of cookies and similar technologies, Art. 61 para. 4 of the Liechtenstein Communications Act (KomG) additionally applies.

Insofar as we process data of persons in Switzerland, we also comply with the Swiss Federal Act on Data Protection (FADP, revised version).

3. Which data we process, why & on what basis

a) Visiting our website

When accessing our website, data is technically transmitted to our shop system server and stored in log files: IP address, date and time of access, name and URL of the retrieved file, the previously visited page (referrer URL), browser used, as well as operating system and access provider.

Purpose: Delivery and stability of the website, security of our systems, prevention of misuse.
Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in secure and trouble-free operation).
We do not use this data to draw conclusions about your person.

b) Ordering and contract fulfillment

When placing an order, we process: name, billing and delivery address, e-mail address, telephone number (if provided), items ordered, order and payment data, as well as delivery details.

Purpose: Conclusion and fulfillment of the sales contract, shipping, payment processing, customer service, handling of returns and complaints.
Legal basis: Art. 6 para. 1 lit. b GDPR (performance of contract); for the retention of invoices and receipts Art. 6 para. 1 lit. c GDPR (legal obligation).

Providing this data is necessary for the conclusion of the contract. Without it, we cannot process your order.

c) Customer account

You can order from us as a guest or create a customer account. In your customer account, we store your contact and address data as well as your order history.

Purpose: Convenient management of your orders and addresses.
Legal basis: Art. 6 para. 1 lit. b GDPR.
You can request the deletion of your customer account at any time at info@myona.li.

d) Payment processing

Your payment data is not stored by us, but processed directly by the respective payment service provider (depending on the chosen payment method: Shop Pay, credit and debit card, TWINT, PayPal, Apple Pay, Google Pay). We only receive feedback on the payment status as well as the information necessary for allocation.

Purpose: Processing of payment, refunds, fraud prevention.
Legal basis: Art. 6 para. 1 lit. b GDPR; Art. 6 para. 1 lit. f GDPR (fraud prevention).

e) Shipping

For delivery, we transmit your name, delivery address and – insofar as required for delivery – e-mail address or telephone number to Swiss Post.

Purpose: Delivery of your order, shipment tracking, investigation in case of loss or damage.
Legal basis: Art. 6 para. 1 lit. b GDPR.

f) Contacting us

If you write to us via e-mail or a contact form, we process your information to answer your inquiry. A valid e-mail address is required; further information is voluntary.

Purpose: Processing and answering your inquiry.
Legal basis: Art. 6 para. 1 lit. b GDPR (for inquiries regarding an order or initiation of a contract), otherwise Art. 6 para. 1 lit. f GDPR (legitimate interest in communicating with interested parties).

g) Newsletter

If you subscribe to our newsletter, we process your e-mail address as well as the date of registration and confirmation. Registration takes place using the confirmation procedure (double opt-in).

Purpose: Sending information about products, brands, and promotions.
Legal basis: Art. 6 para. 1 lit. a GDPR (consent).
You can revoke your consent at any time – via the unsubscribe link in every message or by e-mail to info@myona.li. The legality of the processing carried out until the revocation remains unaffected.

h) Cookies and similar technologies

See section 8.

4. Recipients of your data

We only pass on personal data insofar as this is necessary to fulfill the above-mentioned purposes or we are legally obliged to do so. Recipients are in particular:

Shopify – operation of our online shop, hosting, order and customer management (data processor)
Payment service providers – processing of the payment method chosen by you
Swiss Post – delivery of your order
IT and e-mail service providers – operation of our communication and office infrastructure (data processor)
Trustees and auditing firms as well as tax authorities – in the context of legal retention and reporting obligations
Authorities, courts, and legal representatives – insofar as legally prescribed or necessary for the assertion, exercise, and defense of legal claims

Contracts for data processing have been concluded with service providers who process data on our behalf in accordance with Art. 28 GDPR. These service providers may process the data exclusively according to our instructions and for the agreed purposes.

We do not sell your data and do not pass it on to third parties for advertising purposes.

5. Transmission to countries outside the EEA

Some of our service providers process data outside the European Economic Area, in particular our shop system in Canada and the United States.

Such a transmission only takes place if an adequate level of protection is guaranteed: based on an adequacy decision of the European Commission, based on standard contractual clauses according to Art. 46 para. 2 lit. c GDPR, or based on another legally provided guarantee. We will inform you about the basis used in individual cases upon request at info@myona.li.

6. Storage duration

We retain personal data only as long as it is necessary for the stated purposes or as required by legal retention periods:

Order, invoice, and receipt data: ten years due to commercial and tax law retention obligations
Customer account: until deletion of the account by you or upon your request
Newsletter: until revocation of your consent
Contact inquiries: until final processing, thereafter within the framework of any retention obligations
Server log files: for a short, technically necessary period, thereafter automated deletion

Subsequently, the data is deleted or anonymized.

7. Your rights

You have the following rights according to applicable law:

Information about the data processed concerning you (Art. 15 GDPR)
Correction of incorrect data (Art. 16 GDPR)
Deletion (Art. 17 GDPR)
Restriction of processing (Art. 18 GDPR)
Data portability in a structured, common, and machine-readable format (Art. 20 GDPR)
Objection to processing based on a legitimate interest (Art. 21 GDPR)
Revocation of given consent with effect for the future (Art. 7 para. 3 GDPR)

To exercise these rights, a message to info@myona.li is sufficient. For the protection of your data, we may require proof of identity.

Legal restrictions remain reserved: We must continue to store certain data despite a deletion request if legal retention obligations exist or the data is necessary for the assertion, exercise, or defense of legal claims.

Right of complaint:
You have the right to complain to a supervisory authority.
Responsible for us is the Data Protection Office of the Principality of Liechtenstein, Vaduz (www.datenschutzstelle.li).
Persons residing in Switzerland can also contact the Federal Data Protection and Information Commissioner (FDPIC), Bern (www.edoeb.admin.ch).

8. Cookies & similar technologies

Cookies and similar technologies are used on our website.

Technically necessary cookies are required for the website and the ordering process to function – e.g., for the shopping cart, login to the customer account, and security functions. They are used without consent (Art. 61 para. 4 KomG; Art. 6 para. 1 lit. f GDPR).

All other cookies and technologies – especially those for reach measurement, analysis, and marketing – are only used with your consent (Art. 61 para. 4 KomG in conjunction with Art. 6 para. 1 lit. a GDPR). You make your selection in the cookie notice upon your first visit; you can change or revoke it at any time.

Additionally, you can delete or block cookies in your browser settings. If technically necessary cookies are blocked, individual functions of the website may not be available.

9. No automated decision-making

We do not use automated decision-making including profiling within the meaning of Art. 22 GDPR that would have legal effect on you or significantly affect you in a similar manner.

10. Data security

The transmission of your data on our website is encrypted (TLS). We take appropriate technical and organizational measures to protect your data from loss, misuse, and unauthorized access, and restrict access to persons who need it for the fulfillment of their tasks.

11. Amendment of this privacy policy

We adjust this privacy policy if our services, the services used, or legal requirements change. The version published on this page with the date mentioned above applies at all times.