Privacy Policy

We are pleased about your interest in our online shop. The protection of your personal data is important to us. Below we inform you about how we process personal data in the context of our business activities.

The processing of your personal data is carried out in accordance with the Swiss Federal Act on Data Protection (FADP).

The controller for the data processing described in this privacy policy is the operator of this website as named in the imprint.

Our website is operated on servers of Hetzner Online GmbH, Germany. A data processing agreement exists with Hetzner.

We use Shopware 6 as our shop system. The processing of personal data takes place on our servers or at commissioned service providers within the framework of contract execution.

When visiting our website, technical data is automatically collected (e.g. IP address, date and time of access, pages accessed, browser type, operating system). This data is stored in server log files and serves to ensure trouble-free operation as well as IT security.

Disclosure abroad only takes place in countries with an adequate level of data protection or using appropriate safeguards in accordance with the FADP.

For security and performance optimization of our website, we use services from Cloudflare Inc., USA. Cloudflare acts as a content delivery network (CDN) as well as a security service provider (e.g. DDoS protection).

Technical connection data (e.g. IP address) may be processed in this context. Data transmission takes place on the basis of appropriate safeguards in accordance with the FADP.

We process personal data that you provide to us in the context of an order, when opening a customer account or when contacting us.

This includes in particular:

• First and last name
• Billing and delivery address
• Email address
• Telephone number
• Payment information
• Order data

Processing takes place for contract execution, delivery of goods, invoicing, customer service and to fulfill legal retention obligations (generally 10 years in accordance with the Code of Obligations).

For payment processing, we transfer necessary payment data to the following service providers:

• PostFinance AG, Bern (including credit card payments and TWINT via PostFinance)
• PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg

Depending on the chosen payment method, data processing is carried out directly by the respective payment service provider. Their own privacy policies apply in addition.

For purchase on invoice, we reserve the right to carry out a credit check. For this purpose, personal data may be transmitted to CRIF AG, Hagenholzstrasse 81, 8050 Zurich.

The credit check serves to protect against payment defaults.

For the delivery of your order, we transfer necessary data to commissioned logistics companies (e.g. Swiss Post or courier services).

Transactional emails (e.g. order and shipping confirmations, invoices) as well as our support communication are sent via Infomaniak Network SA, Geneva (Switzerland).

For sending newsletters we use Amazon Simple Email Service (SES), provided by Amazon Web Services EMEA SARL, Luxembourg. Your email address is processed on Amazon Web Services servers within the European Union; a data processing agreement (AWS DPA) is in place.

Newsletter subscription uses the double opt-in procedure. You may unsubscribe at any time.

If you have a customer account and items remain in your cart without you placing an order, we send you a single reminder by email. The same applies if an order could not be completed, for example because the payment failed. Our aim is to help you complete your purchase. Each of these emails contains a link you can use to unsubscribe from these reminders.

Our website uses cookies and similar technologies, e.g. your browser's local storage. In the cookie window they are divided into four groups:

• Technically required: necessary for the shop to work, e.g. for the shopping cart, session, time zone and payment processing (PostFinance, PayPal). This group cannot be switched off.
• Statistics: Google Analytics, so that we understand how our shop is used.
• Marketing: services we use to measure the success of our advertising and to show ads on other platforms (see section 10).
• Comfort features: e.g. embedded videos from YouTube and Vimeo and the wishlist. This group stays switched off until you allow it.

Statistics and marketing services are active unless you object. On your first visit, a banner informs you about this. There you can reject all statistics and marketing services with “Only technically required” or choose them individually under “Configure”. You can change your choice at any time via the “Cookie settings” link at the bottom of every page.

If you object, we no longer load the services of Meta and Pinterest. Google, Microsoft and OpenAI receive the signal that no consent has been given; Google and Microsoft then only process limited measurement signals without cookies. The purchase notifications our server sends to Meta and OpenAI (see section 10) are also omitted.

We store your choice in a cookie for 30 days. After that, and after changing the shop language, we will ask you again. Depending on the service, the providers' cookies are stored for the duration of the session and up to two years.

Unless you object, we use the following services:

• Google Analytics and Google Ads (Google Ireland Limited, Ireland, or Google LLC, USA): usage statistics, measuring the success of ads and remarketing. We use Google Consent Mode for this.
• Microsoft Advertising (Microsoft Ireland Operations Limited, Ireland, or Microsoft Corporation, USA): measuring success and remarketing for ads on Bing. With “Website Insights” (technology from Microsoft Clarity), Microsoft can also record clicks, scrolling and loading times of our pages.
• Meta Pixel (Meta Platforms Ireland Limited, Ireland, or Meta Platforms, Inc., USA): measuring success and delivering ads on Facebook and Instagram.
• Pinterest Tag (Pinterest Europe Limited, Ireland, or Pinterest, Inc., USA): measuring success and delivering ads on Pinterest.
• OpenAI Pixel (OpenAI, USA): measuring the success of ads in ChatGPT.

Information about your visit is collected in the process, e.g. pages viewed, items in the cart, order value, device and browser, where the visit came from (e.g. a click on an ad), online identifiers and your IP address.

For more accurate measurement, we additionally transmit, depending on the service, contact details for logged-in customers and after an order (email address, first and last name, phone number, postcode, town, country and customer number). Before transmission, these details are converted into an irreversible checksum (hash); some services receive the customer number unchanged. We also report purchases to Meta and OpenAI directly from our server so that they are counted even if your browser blocks the scripts.

The providers also process the data partly for their own purposes, e.g. to improve their advertising systems. Their privacy policies apply in addition.

The providers mentioned may process data in the USA. Where a provider is certified under the Swiss-U.S. Data Privacy Framework, the transfer is based on the Federal Council's adequacy decision; otherwise on the European Commission's standard contractual clauses, recognised by the FDPIC.

After you complete your order, we display a Google Customer Reviews opt-in window. If you actively consent, we transmit the following data to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA:

• Order number
• Email address
• Delivery country (Switzerland or Liechtenstein)
• Estimated delivery date
• For products with a registered GTIN/EAN: the product identifier

Google uses this data to send you, after the estimated delivery date, an email survey in which you can rate your shopping experience and optionally the products purchased.

The legal basis is your explicit consent (clicking “Yes” in the opt-in window), revocable at any time. The transfer of data to the USA is based on the European Commission's Standard Contractual Clauses, recognised by the FDPIC.

More info: Google Customer Reviews Program Policies · Google Privacy Policy

Where necessary, we process personal data to enforce our claims or to defend against claims. In this context, transfer to debt collection or legal service providers may occur.

In accordance with the FADP, you have in particular the following rights:

• Right to information about the processed personal data
• Right to correction of incorrect data
• Right to deletion, provided no legal retention obligations exist
• Right to release of the data you provided in a common electronic format
• Right to object to processing for analytics and advertising purposes, e.g. via the “Cookie settings”
• Right to revoke a given consent

To exercise your rights, please contact the contact address specified in the imprint.

You also have the right to file a complaint with the Federal Data Protection and Information Commissioner (FDPIC).