Privacy policy

Data controller

The data controller is the site publisher (see legal notice).

Data collected

We collect data necessary for orders (identity, address, email), payments (TWINT, manual confirmation), and customer relations. Browsing data may be collected via cookies.

Purposes

Order fulfilment, account management, customer service, billing, legal obligations, and with your consent: marketing, analytics.

Legal basis

Contract performance, consent (newsletters, non-essential cookies), legal obligation, legitimate interest (security, service improvement).

Retention

Order and billing data: as required by law (e.g. 10 years). Account data: while the account is active.

Your rights (GDPR)

Right of access, rectification, erasure, restriction, portability, objection. Contact us. You may lodge a complaint with your supervisory authority.

Cookies and third parties

Necessary cookies for operation; optional cookies (analytics, marketing) with consent. TWINT for payments (manual confirmation); services such as Google (Analytics, Gemini) as configured.

Security

Technical and organisational measures to protect your data (HTTPS, limited access, secure passwords).