Privacy

Privacy Policy

Last updated: January 2026

Privacy at a Glance

  • We do not use Google Analytics or Facebook Pixel
  • We do not sell personal data to third parties
  • All data is stored on servers in the EU/Switzerland
  • We only use technically necessary cookies
  • You have the right to access, rectification, and deletion at any time

1. Data Controller

arvadis GmbH

Zelglistrasse 39

5600 Lenzburg, Switzerland

Email: datenschutz@echter-schweizer-onlineshop.ch

Commercial Register: CHE-112.525.913

2. Principles of Data Processing

We process personal data in accordance with the Swiss Data Protection Act (DPA/revDPA) and, where applicable, the EU General Data Protection Regulation (GDPR). We only collect data that is necessary for the respective purpose and delete it as soon as it is no longer needed.

3. What Data We Collect

3.1 When Visiting Our Website

Each time our website is accessed, the following technical data is automatically collected:

  • IP address (anonymized)
  • Date and time of access
  • Page accessed (URL)
  • Referrer (referring page)
  • Browser type and version
  • Operating system

Legal basis: Legitimate interest in the technical provision and security of the website (Art. 6(1)(f) GDPR / Art. 31 DPA).

3.2 During Shop Certification

When a shop applies for our quality seal, we collect:

  • Company name and legal form
  • Business address
  • Commercial Register number
  • Contact details (email, phone)
  • Shop URL
  • Information about management

As part of the certification, a usage agreement is concluded. This includes, among other things, the right to on-site inspection in the event of justified suspicion. The contractual data is stored for the duration of the business relationship.

Legal basis: Contract performance (Art. 6(1)(b) GDPR / Art. 31 DPA).

3.3 During Badge Usage

When our quality seal is displayed on a certified shop page, we collect:

  • Number of badge impressions (anonymized)
  • Clicks on the badge
  • Referrer URL (shop page)

This data is used for statistics for shop operators and for detecting misuse.

4. Cookies

We exclusively use technically necessary cookies:

CookiePurposeDuration
next-auth.session-tokenAuthentication (administrators only)Session
next-auth.csrf-tokenSecurity (CSRF protection)Session
NEXT_LOCALELanguage setting1 year

We do not use tracking cookies, advertising cookies, or third-party cookies such as Google Analytics or Facebook.

5. Email Communication

For sending emails (e.g. certification confirmations), we use the service Postmark (ActiveCampaign, LLC, USA). Postmark is certified under the EU-US Data Privacy Framework.

We only send emails within the scope of existing business relationships or with explicit consent.

6. Hosting and Infrastructure

Our website is hosted in Switzerland or the EU. Data processing is GDPR-compliant and in accordance with the Swiss Data Protection Act (DPA).

7. Disclosure of Data to Third Parties

We do not share your personal data with third parties, except:

  • You have given explicit consent
  • There is a legal obligation
  • It is necessary for contract performance (e.g. email delivery)

8. Data Retention Period

Server logs30 days
Badge statistics2 years (anonymized)
Certification dataDuration of business relationship + 10 years
Email correspondence5 years

9. Your Rights

Under the Swiss Data Protection Act and the GDPR, you have the following rights:

Right of access

You may request information about your stored data.

Right to rectification

You may have incorrect data corrected.

Right to deletion

You may request the deletion of your data.

Data portability

You may receive your data in a commonly used format.

To exercise your rights, contact us at: datenschutz@echter-schweizer-onlineshop.ch

10. Supervisory Authority

If you believe that the processing of your data violates data protection law, you may contact the competent supervisory authority:

Federal Data Protection and Information Commissioner (FDPIC)

Feldeggweg 1

3003 Bern, Switzerland

www.edoeb.admin.ch

11. Changes to This Privacy Policy

We reserve the right to amend this privacy policy as needed to adapt it to changes in the legal situation or changes to our services. The current version is always available on our website.

Privacy Policy – Echter Schweizer Onlineshop