Privacy Policy
As of: 4 October 2026
This page explains which personal data we process when you visit coffeecoachingclub.ch, order from us, write to us or shop in our showrooms in Bern and Zurich. It also explains why we do this, who receives the data and what rights you have.
1. Who is responsible
Coffee Coaching Club GmbH, Gerberngasse 44, 3011 Bern, Switzerland (UID CHE-298.907.551)
Email: [email protected], phone: +41 76 789 15 79
You can reach us at this address for any questions about data protection.
2. The services at a glance
| Service | Purpose | Provider | When |
|---|---|---|---|
| Shopify | Shop, checkout, customer account, subscription, till in the showroom | Shopify International Limited, Ireland | always |
| Shopify Payments, Klarna, TWINT | Payment | Shopify International Limited with payment processors; Klarna Bank AB, Sweden; TWINT AG, Switzerland | when you pay this way |
| HeyLight | Financing, instalment notice on product pages | HeyLight AG, Switzerland | notice on page load, financing data only on application |
| Swiss Post, DHL Express | Shipping | Die Schweizerische Post AG, Switzerland; DHL Express | on delivery |
| Jackson (Shopify Inbox) | Chat with our AI assistant | Shopify | when you chat |
| Shopify Messaging | Newsletter | Shopify | with your consent |
| Infomaniak | Infomaniak Network SA, Switzerland | when you write to us | |
| Messages | WhatsApp Ireland Limited | when you write to us via WhatsApp | |
| Google Analytics | Web analytics | Google Ireland Limited | with your consent |
| Microsoft Clarity | Web analytics | Microsoft | always; without consent no cookies and no recognition |
| Google Ads, Meta, TikTok, Pinterest | Advertising and measuring its success | Google Ireland Limited, Meta Platforms Ireland Limited, TikTok Technology Limited, Pinterest Europe Ltd. | with your consent |
| Google review badge, Bundler.app | Showing our reviews, bundles and gifts in the cart | Google; Bundler.app, Slovenia | on page load |
3. Orders, customer account and subscriptions
When you order, we process your name, delivery and billing address, email address, phone number, the products ordered, payment and shipping details and our communication with you. With a customer account you can see your orders and subscriptions. We need this data to process your order, handle returns and warranty cases and meet our legal obligations, for example in accounting. For an order we need the details marked as required fields. Without them we cannot conclude or perform a contract with you. If you buy in a showroom and give us contact details for this, for example for a receipt or a warranty case, we also record them in Shopify.
Our shop runs on Shopify. The contracting party for merchants outside North America is Shopify International Limited in Dublin, Ireland. Shopify processes the data on our behalf and may also transfer it to Canada, where Shopify has its headquarters, and to the USA. For this, Shopify relies on Binding Corporate Rules and Standard Contractual Clauses. If you use Shop Pay or the Shop app, Shopify is itself responsible for this. More: Shopify's privacy policy and Shopify's consumer privacy policy.
4. Payment
We do not receive full card details. They go directly to the payment service providers.
- Shopify Payments: Cards, Apple Pay, Google Pay, Shop Pay, Klarna, TWINT and USDC run via Shopify Payments. The contracting party is Shopify International Limited. Payments are processed by payment processors chosen by Shopify. For Switzerland, Shopify names Stripe Payments Europe, Limited (Ireland), Adyen N.V. (Netherlands) and PayPal Pte. Ltd. (Singapore). For Apple Pay and Google Pay, the terms of Apple and Google also apply.
- Klarna: Klarna Bank AB (publ), Stockholm, Sweden, also processes data on Klarna payments under its own responsibility. Klarna's privacy notice
- TWINT: TWINT AG, Stauffacherstrasse 41, 8004 Zurich. TWINT's privacy statement
- USDC: If you pay with USDC, you use your own crypto wallet. The payment is recorded on a public blockchain. Wallet addresses, amount and time can be viewed there worldwide and cannot be deleted.
- HeyLight: If you finance via HeyLight, HeyLight AG, Seefeldstrasse 18, 8008 Zurich, is responsible for assessing your application and for the contract with you. In its privacy policy, HeyLight names transfers to the United Kingdom, the EU (in particular Italy) and the USA. HeyLight's privacy policy
- Prepayment: For a bank transfer, we receive the details belonging to your payment from our bank.
5. Shipping and pick-up
For delivery, we pass on to Swiss Post (Die Schweizerische Post AG) the data it needs for delivery. For individual shipments we use DHL Express. DHL's privacy notice applies. If you pick up your order in Bern or Zurich, the data stays with us.
6. Contact, forms, chat and WhatsApp
Email and phone: We use what you write to us or tell us on the phone to answer your enquiry. Our emails are hosted by Infomaniak Network SA in Geneva. Infomaniak stores email data exclusively in Switzerland.
Support and warranty: For technical issues, our help pages ask you for photos or videos of the problem and of the rating plate. You send them to us by email, large videos as a link. We use them only to assess and resolve your issue.
Forms: Shopify forwards contact forms and price enquiries on our website to us. Depending on the form, Shopify creates a customer profile in our shop. If you tick the box allowing us to send you tips and offers, we also use your email address for this. Without the tick, only for the reply to your enquiry.
Chat with Jackson: In the chat window, our AI assistant «Jackson» answers your questions first. Jackson is a service provided by Shopify (Shopify Inbox). On request, he hands over to our team. The answers are generated automatically and may contain errors. We process the content of your messages, the page you write from and the country you write from. If you sign in to your customer account, your name, your email address and your orders are added. According to Shopify, Shopify processes the chat content to generate the answers and to continuously improve the AI assistant. For this improvement, Shopify also uses the chat content for its own purposes. If you do not want this, please write to us by email instead. Please do not enter payment details, passwords or health data in the chat.
WhatsApp: If you write to us via WhatsApp, we process your phone number, your profile name and your messages in order to reply to you. The provider for Switzerland and the EEA is WhatsApp Ireland Limited, Dublin. WhatsApp also processes connection and usage data for its own purposes and may transfer data to WhatsApp LLC in the USA, which is certified under the Swiss-U.S. Data Privacy Framework. WhatsApp's privacy policy
7. Newsletter
For the newsletter we need your email address and your consent. Shopify stores the sign-up in our shop. For sending, we use Shopify Messaging, Shopify's email function. Shopify Messaging uses a tracking pixel and the links to record whether you open an email and which links you click. This shows us which content interests you. You can unsubscribe at any time via the link in every email or by sending us a message.
8. Cookies and your settings
Cookies and similar technologies store information on your device or read it. On your first visit, our cookie banner asks what you allow:
- Strictly necessary: for example for the cart, sign-in and your cookie choice. These cookies are always active.
- Personalisation: remembers details about your visit so that we can adapt it next time.
- Analytics: shows us how our website is used (section 9).
- Marketing: for advertising and measuring its success (section 10).
You can refuse cookies and change your choice at any time: Open cookie settings. You can also delete or block cookies in your browser. The shop may then only work to a limited extent.
9. Web analytics
Shopify: For our shop statistics, Shopify records how visitors use the shop and what is ordered, within the limits of your cookie choice.
Google Analytics 4: If you allow «Analytics», we use Google Analytics to measure which pages are viewed, how you found us and how our calculators and simulators are used. For users in the European Economic Area and Switzerland, Google Ireland Limited in Dublin, Ireland, is responsible. Data may be transferred to Google LLC in the USA, which is certified under the Swiss-U.S. Data Privacy Framework. According to Google, Google Analytics 4 does not log or store IP addresses. Google Analytics keeps user-level data for no more than 14 months. Google's privacy policy
Microsoft Clarity: Clarity shows us how our pages are used: clicks, scrolling and mouse movements, pages viewed, device and browser information and the country you access the site from. This is used to create heatmaps, analyses and recordings of individual visits. This data is collected and used by us and by Microsoft. Clarity only sets cookies such as _clck, _clsk, CLID and MUID once you have consented. Without your consent, Clarity sets no cookies but still records individual page views, without recognising you across pages. You can object to this at any time by sending us a message. Clarity only shares data with Microsoft Advertising for advertising purposes if you have consented to use for advertising. According to Microsoft, recordings are stored for 30 days, heatmaps and analysed click data for 9 months. The provider is Microsoft Corporation in the USA. Where Microsoft uses the data for its own purposes, Microsoft Ireland Operations Limited in Dublin is responsible for Switzerland and the EEA. Microsoft Corporation is certified under the Swiss-U.S. Data Privacy Framework. Microsoft's privacy statement
10. Advertising and measuring success
If you allow «Marketing», Shopify transmits events such as page views, items in the cart and purchases to the following services, partly directly from the browser, partly from server to server. Your IP address, browser and device information and identifiers from our shop such as your email address may also be transmitted so that the platforms can match the events. This lets us show advertising on these platforms and measure whether it works. The platforms may link this data to your account with them. For collecting the data on our website and transmitting it to Meta and TikTok, we are jointly responsible with the respective platform. The platform alone is responsible for any further processing.
- Google Ads: Google Ireland Limited, Dublin, Ireland. Transfer to Google LLC, USA, certified under the Swiss-U.S. Data Privacy Framework. Google's privacy policy
- Meta (Facebook, Instagram): Where the data protection law of the EEA or Switzerland applies, Meta Platforms Ireland Limited, Dublin, Ireland, is responsible. Transfer to Meta Platforms, Inc., USA, certified under the Swiss-U.S. Data Privacy Framework. Meta's privacy policy
- TikTok: TikTok Technology Limited, Ireland, and TikTok Information Technologies UK Limited, United Kingdom. TikTok also stores data in the USA, Malaysia and Singapore and grants companies in other countries limited remote access (section 14). TikTok's privacy policy
- Pinterest: Pinterest Europe Ltd., Ireland, together with Pinterest, Inc., USA. Pinterest, Inc. is certified under the Swiss-U.S. Data Privacy Framework. Pinterest's privacy policy
11. Other third-party content
Your browser loads the following content directly from the providers when a page is opened. They receive technical information such as your IP address and your browser.
- HeyLight instalment notice: On product pages we show what financing via HeyLight would cost. The script for this comes from HeyLight.
- Google review badge: To show our Google reviews, your browser loads a script and an embedded frame from Google.
- Bundles and gifts in the cart: The Bundler and CartBot apps of Bundler.app, Ljubljana, Slovenia, load their scripts from their own servers. According to Bundler.app, the CartBot servers are located in Toronto, Canada. According to its own statement, Bundler.app does not store customer data from your orders.
Links to social networks, Google Maps and Tripadvisor: These are simple links. Data only goes to the respective platform when you click on them.
12. Other service providers
For individual tasks we use apps in the Shopify environment that may process order data for this purpose:
- Channable (ProductImpulse BV, Utrecht, Netherlands) for product data on comparison and sales platforms. Channable also processes order data on our behalf.
- Smart Automatic Discounts (E-Trade Partner P.S.A., Warsaw, Poland) for automatic discounts. Name, email address, phone number and address may be processed on our behalf.
- Apps by Shopify itself, for example for subscriptions, forms, discounts and labels. Section 3 applies to them.
13. Fraud protection
To protect us and our customers against fraud, we check orders with Shopify tools (Fraud Control). For this, name, email address, phone number, address, IP address, approximate location and browser and operating system are processed. If an order is rejected solely by automated means, you can state your point of view and request that a person reviews the decision.
14. Disclosure abroad
| Country | Recipients | Basis |
|---|---|---|
| Ireland, Sweden, Netherlands, Slovenia, Poland and other EU and EEA states | Shopify, Stripe, Adyen, Klarna, Google, Meta, Microsoft, TikTok, Pinterest, WhatsApp, Bundler.app, Channable, E-Trade Partner | Adequate data protection according to the Swiss Federal Council |
| United Kingdom | TikTok | Adequate data protection according to the Swiss Federal Council |
| Canada | Shopify, Bundler.app (CartBot servers) | Adequate data protection according to the Swiss Federal Council (private sector) |
| USA | Google, Meta, Microsoft, Pinterest, WhatsApp | Certified under the Swiss-U.S. Data Privacy Framework; the Swiss Federal Council has recognised adequate data protection for this since 15 September 2024 |
| USA | Shopify | Binding Corporate Rules and Standard Contractual Clauses |
| USA, Malaysia, Singapore, Australia, Brazil, China, Philippines | TikTok (storage or limited remote access) | According to TikTok, Standard Contractual Clauses |
| Canada, United Kingdom, Israel, Japan, South Korea | TikTok (limited remote access) | According to TikTok, adequacy decisions |
| Singapore | PayPal Pte. Ltd. as a possible payment processor of Shopify | Necessary to perform the contract with you (Art. 17(1)(b) FADP) |
| Worldwide (public blockchain) | USDC payment | Necessary to perform the contract with you (Art. 17(1)(b) FADP) |
| Country of delivery for shipments abroad | Shipping service providers | Necessary to perform the contract with you (Art. 17(1)(b) FADP) |
You can request a copy of the safeguards from us. HeyLight and Klarna disclose data in accordance with their own privacy policies (section 4). If you use Apple Pay or Google Pay, your own agreements with these providers apply.
15. How long we keep data
We keep data for as long as we need it for the purpose or the law requires it:
- We keep business records and accounting vouchers, including invoices, for ten years from the end of the financial year in accordance with Art. 958f of the Swiss Code of Obligations.
- Your customer account remains until you delete it or ask us to delete it.
- We keep enquiries by email, form, chat or WhatsApp, including photos and videos, for as long as we need them for processing, follow-up questions or to protect our rights. We may keep documents relating to warranty and guarantee cases until the limitation period for warranty claims expires, generally two years from delivery (Art. 210 of the Swiss Code of Obligations).
- For the newsletter, we store your email address until you unsubscribe.
- For Google Analytics and Microsoft Clarity, the periods in section 9 apply.
16. Security
We protect your data with technical and organisational measures. The connection to our website is encrypted. Nobody can guarantee complete security.
17. Your rights
- Access: You can ask whether and which data we process about you. Access is generally free of charge and provided within 30 days.
- Release and transfer: You can request data you have given us in a common electronic format.
- Rectification: We correct inaccurate data.
- Objection and erasure: You can object to processing and request that we delete your data. We do so unless we have to keep the data due to a legal obligation or have an overriding interest in processing it further.
- Withdrawing consent: You can withdraw consent at any time with effect for the future, for example in the cookie settings or via the unsubscribe link.
To do so, write to us at [email protected]. So that we do not give data to unauthorised persons, we may ask you to prove your identity. If you disagree with how we handle your data, you can contact the Federal Data Protection and Information Commissioner: FDPIC, Feldeggweg 1, 3003 Bern, www.edoeb.admin.ch.
18. For people in the EEA, for example in Liechtenstein
If we offer goods to people in the European Economic Area or analyse their behaviour on our website, the General Data Protection Regulation (GDPR) also applies. We then rely on the following legal bases:
- Contract and pre-contractual measures, such as order, payment, shipping and replies to your enquiries (Art. 6(1)(b) GDPR)
- Legal obligations, such as keeping accounting vouchers (Art. 6(1)(c) GDPR)
- Legitimate interests, such as secure operation of the shop, fraud protection, prompt advice in the chat, showing our reviews, financing notices and bundles, and cookieless usage analysis with Clarity (Art. 6(1)(f) GDPR)
- Your consent for personalisation, analytics and marketing cookies and the newsletter (Art. 6(1)(a) GDPR)
You have the rights under Art. 15 to 21 GDPR, in particular to access, rectification, erasure, restriction and data portability. You can lodge a complaint with a supervisory authority, in particular in the state where you live or work. In Liechtenstein this is the Datenschutzstelle, Kirchstrasse 8, Postfach 684, 9490 Vaduz, www.datenschutzstelle.li. The European Commission has recognised adequate data protection for Switzerland.
Right to object: If we process your data on the basis of legitimate interests, you can object at any time on grounds relating to your particular situation. You can object to direct marketing at any time without giving reasons.
19. Changes
We update this privacy policy when our processing changes. The version published here applies.