Privacy Statement

1. Controller and Contact Information

The controller responsible for the processing of your personal data is:

For questions regarding data protection, you can contact us at the above email address.

2. Data Collection and Processing

2.1 Order and Shipping Data

Data categories: Name, shipping address, billing address, phone number, email address, order details

Purpose: Processing and fulfilling orders, shipping products, providing customer support

Legal basis: Performance of contract (Article 6 para. 1 lit. b GDPR / Article 31 para. 1 nFADP)

2.2 Payment Data

Data categories: Payment information processed by Stripe (we do not store card details)

Purpose: Processing payments for orders

Legal basis: Performance of contract (Article 6 para. 1 lit. b GDPR / Article 31 para. 1 nFADP)

2.3 Newsletter Data

Data categories: Email address

Purpose: Sending newsletters about new products and updates

Legal basis: Consent (Article 6 para. 1 lit. a GDPR / Article 31 para. 1 nFADP)

2.4 Communication Data

Data categories: Email address, message content when you contact us

Purpose: Responding to inquiries and providing customer support

Legal basis: Legitimate interests (Article 6 para. 1 lit. f GDPR / Article 31 para. 2 lit. a nFADP)

3. Cookies and Website Usage

We use only technically necessary cookies and local storage for:

• Shopping cart: To remember items in your cart during your visit
• Essential functionality: To ensure the website works properly

Legal basis: Legitimate interests (Article 6 para. 1 lit. f GDPR / Article 31 para. 2 lit. a nFADP) for essential website functionality.

4. Data Sharing

We share your data only with service providers necessary to fulfill your orders:

• Payment processor: Stripe (for processing payments)
• Shipping companies: For delivery of your orders
• Email service: For sending newsletters and order confirmations
• Legal authorities: When required by law

5. Data Storage and Retention

We store your data for the following periods:

• Order data: 10 years for tax and commercial law compliance
• Newsletter data: Until you unsubscribe or 2 years after last interaction
• Communication data: 3 years after last contact

6. Your Rights

Under data protection law, you have the following rights:

• Right of access: Request information about your personal data
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your data (subject to legal obligations)
• Right to data portability: Receive your data in a structured format
• Right to withdraw consent: Unsubscribe from newsletters at any time

To exercise these rights, contact us at julia@piecedtogether.ch.

7. Security

We implement appropriate security measures to protect your data. Payment processing is handled securely by Stripe, and we do not store credit card information.

8. Contact

For questions about this Privacy Statement or our data practices: