Privacy Policy

Privacy: The protection of your personal data is very important to us. We adhere to the Swiss Federal Act on Data Protection (revDSG / FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).

1. Data We Collect

We collect and process personal data that you provide when registering, ordering, contacting us or subscribing to our newsletter: • Identity & contact: name, email, phone, delivery/billing address • Account: login credentials (password stored hashed), language preference • Order: products, quantities, prices, payment status, order history • Communication: messages sent via contact forms or support • Technical: IP address (short-term), browser type, consent choices • Payment: transaction references via Stripe (no full card numbers on our servers)

2. Purpose of Processing

We process your data to: • Fulfil and deliver orders and process payments • Manage your customer account and wishlist • Send transactional emails (order confirmation, shipping, password reset) • Respond to enquiries and provide customer support • Comply with legal obligations (tax, accounting, consumer law) • Improve our website (only with your analytics consent) • Send marketing communications (only with your explicit consent)

3. Legal Basis

Processing is based on contract performance (orders), legitimate interests (security, fraud prevention), legal obligations (Swiss commercial and tax law) and, where required, your consent (newsletter, non-essential cookies, marketing).

4. Data Sharing

We share data only when necessary with: • Stripe — payment processing • Postmark — transactional email • Cloudflare R2 — product images • Hosting provider: {companyHostingProvider}

5. International Transfers

Some providers process data outside Switzerland/EU. Contact {companyPrivacyEmail} for details.

6. Cookies & Consent

We use: • Necessary cookies: shopping cart session, authentication, security (always active) • Analytics cookies: usage statistics (only with your consent) • Marketing cookies: campaign measurement (only with your consent) You can change your choices at any time via the cookie settings. Consent decisions are logged with a timestamp for compliance purposes.

7. Retention

Order/invoice data: {companyDataRetentionOrders} Account data: until deletion request Marketing consents: {companyDataRetentionMarketing} Cookie consent logs: 3 years Server logs: {companyDataRetentionLogs}

8. Your Rights & Deletion Requests

You have rights of access, rectification, erasure, restriction, portability and objection. Contact: {companyLegalName} {companyPrivacyEmail} {companyPostAddress} Complaints: edoeb.admin.ch