Privacy policy

This is a translation for your information. Only the German version is legally binding.

As of: 4 November 2026

This page explains which personal data we process when you visit coffeecoachingclub.ch, order from us, write to us, shop in our showrooms in Bern and Zürich or bring us an appliance for servicing. It also explains why we do this, who receives the data and what rights you have.

1. Who is responsible

Coffee Coaching Club GmbH, Gerberngasse 44, 3011 Bern, Switzerland (UID CHE-298.907.551)
Email: [email protected], phone: +41 76 789 15 79

You can reach us at this address for any questions about data protection.

2. The services at a glance

Service	Purpose	Provider	When
Shopify	Shop, checkout, customer account, subscription, till in the showroom	Shopify International Limited, Ireland	always
Shopify Payments, Klarna, TWINT	Payment	Shopify International Limited with payment processors; Klarna Bank AB, Sweden; TWINT AG, Switzerland	when you pay this way
HeyLight	Financing, instalment notice on product pages	HeyLight AG, Switzerland	notice on page load, financing data only on application
Swiss Post, DHL Express	Shipping	Die Schweizerische Post AG, Switzerland; DHL Express	on delivery
Jackson (Shopify Inbox)	Chat with our AI assistant	Shopify	when you chat
Shopify Messaging	Newsletter	Shopify	with your consent
Infomaniak	Email	Infomaniak Network SA, Switzerland	when you write to us
Claude, ChatGPT	Draft replies, recording of service orders and enquiries, texts, drafts for replies in the Community and for the newsletter (section 6b)	Anthropic Ireland, Limited, Ireland; OpenAI Ireland Limited, Ireland	when you write to us, drop off an appliance or write a post in the Community
Cloudflare	Operation of the order app «CCC Serviceannahme» and of the app «CCC Versand» (service portal, inbox, appointment booking, «Mein CCC», care reminders, Community, feedback after delivery): emails with attachments, requests, appointments, order data, photos, videos and files, Community posts and images, feedback on deliveries (sections 6, 6a, 6c, 6d and 6e); protection of the appointment form against spam (Cloudflare Turnstile); experiences (reviews), emails after a purchase and the coffee bean reminder (sections 6f and 6g)	Cloudflare, Inc., USA; storage in the EU	when you write to us, for service, repair and warranty orders, for requests in the service portal, for appointments, when you use «Mein CCC» or the Community and after an order has been delivered, when you share an experience and after a purchase (section 6g)
Partner workshops, general importers, manufacturers	Service, repair, warranty (section 6a)	depending on the brand	for service, repair and warranty orders
WhatsApp	Messages	WhatsApp Ireland Limited	when you write to us via WhatsApp
Google Analytics	Web analytics	Google Ireland Limited	with your consent
Microsoft Clarity	Web analytics	Microsoft	always; without consent no cookies and no recognition
Google Ads, Meta, TikTok, Pinterest	Advertising and measuring its success	Google Ireland Limited, Meta Platforms Ireland Limited, TikTok Technology Limited, Pinterest Europe Ltd.	with your consent
Google review badge, Bundler.app	Showing our reviews, bundles and gifts in the cart	Google; Bundler.app, Slovenia	on page load

3. Orders, customer account and subscriptions

When you order, we process your name, delivery and billing address, email address, phone number, the products ordered, payment and shipping details and our communication with you. With a customer account you can see your orders and subscriptions. We need this data to process your order, handle returns and warranty claims and meet our legal obligations, for example in accounting. For an order we need the details marked as required fields. Without them we cannot conclude or perform a contract with you. If you buy in a showroom and give us contact details for this, for example for a receipt or a warranty claim, we also record them in Shopify.

Our shop runs on Shopify. The contracting party for merchants outside North America is Shopify International Limited in Dublin, Ireland. Shopify processes the data on our behalf and may also transfer it to Canada, where Shopify has its headquarters, and to the USA. For this, Shopify relies on Binding Corporate Rules and Standard Contractual Clauses. If you use Shop Pay or the Shop app, Shopify is itself responsible for this. More: Shopify’s privacy policy and Shopify’s consumer privacy policy.

4. Payment

We do not receive full card details. They go directly to the payment service providers.

• Shopify Payments: Cards, Apple Pay, Google Pay, Shop Pay, Klarna, TWINT and USDC run via Shopify Payments. The contracting party is Shopify International Limited. Payments are processed by payment processors chosen by Shopify. For Switzerland, Shopify names Stripe Payments Europe, Limited (Ireland), Adyen N.V. (Netherlands) and PayPal Pte. Ltd. (Singapore). For Apple Pay and Google Pay, the terms of Apple and Google also apply.
• Klarna: Klarna Bank AB (publ), Stockholm, Sweden, also processes data on Klarna payments under its own responsibility. Klarna’s privacy notice
• TWINT: TWINT AG, Stauffacherstrasse 41, 8004 Zürich. TWINT’s privacy statement
• USDC: If you pay with USDC, you use your own crypto wallet. The payment is recorded on a public blockchain. Wallet addresses, amount and time can be viewed there worldwide and cannot be deleted.
• HeyLight: If you finance via HeyLight, HeyLight AG, Seefeldstrasse 18, 8008 Zürich, is responsible for assessing your application and for the contract with you. In its privacy policy, HeyLight names transfers to the United Kingdom, the EU (in particular Italy) and the USA. HeyLight’s privacy policy
• Prepayment: For a bank transfer, we receive the details belonging to your payment from our bank.

5. Shipping and pick-up

For delivery, we pass on to Swiss Post (Die Schweizerische Post AG) the data it needs for delivery. For individual shipments we use DHL Express. DHL’s privacy notice applies. If you pick up your order in Bern or Zürich, the data stays with us.

6. Contact, forms, chat and WhatsApp

Email and phone: We use what you write to us or tell us on the phone to answer your enquiry. Our emails are hosted by Infomaniak Network SA in Geneva. Infomaniak stores email data exclusively in Switzerland. So that no enquiry gets lost, we also handle emails in the inbox of our app «CCC Versand». There they are stored with their attachments by Cloudflare in data centres in the EU. We keep emails for up to 10 years after the last message so that we can refer to them in the event of later questions or claims. We delete copies of our automatic emails from the inbox after 180 days.

Support and warranty: For technical issues, our help pages ask you for photos or videos of the problem and of the rating plate. You upload them to our service portal (coffeecoachingclub.ch/en/pages/service-melden). We use them only to assess and resolve your issue. We process service cases only via the portal or in a shop, not by email. If you give us an appliance for service or as a warranty claim, section 6a applies.

Forms: Shopify forwards contact forms and price enquiries on our website to us. Depending on the form, Shopify creates a customer profile in our shop. If you tick the box allowing us to send you tips and offers, we also use your email address for this. Without the tick, only for the reply to your enquiry.

In-store contact: If you would like us to call you back after visiting us in Bern or Zürich, we note down, with your consent, your name, your phone number, your email address and company if you wish, and your request. We store this information as a customer profile in Shopify in order to contact you, and record when and where you gave your consent. You only receive tips and offers by email if you expressly ask for them.

Appointment booking: If you book an appointment with us, for example a consultation, a course or the introductory course for your machine, we process the offer, location, date and time, number of people, your name, your email address, your phone number, your message and, if necessary, the order number. We use this information to plan and confirm the appointment, to remind you of it beforehand and to call you if we have any questions. After the appointment, we may ask you by email for brief feedback. If you are signed in to your customer account, we link the appointment to your account.

Spam protection: To prevent automated requests, the Turnstile service of Cloudflare, Inc. checks whether a human is using the appointment form when it is submitted. In the process, your browser transmits technical characteristics to Cloudflare, namely your IP address, browser identifier (user agent) and characteristics of the encrypted connection. According to Cloudflare, this data is used only to detect bots and not to identify people or create profiles. If you are signed in, there is no check. Cloudflare’s privacy notice on Turnstile

«Mein CCC»: In your customer account, under «Mein CCC», we show you your appointments, your service and repair orders with cost estimate and your setting for care reminders. For this, we link this data to your customer account if your email address has been confirmed.

Care reminders: If you have bought an appliance from us and allowed us to send you tips and offers, we remind you by email when care is due, for example descaling or changing the water filter, and show you suitable care products. For this, we use your first name, your email address, the appliance purchased, the date of purchase and, if recorded, the serial number. Every reminder contains an unsubscribe link; you can also unsubscribe from them in «Mein CCC».

Chat with Jackson: In the chat window, our AI assistant «Jackson» answers your questions first. Jackson is a service provided by Shopify (Shopify Inbox). On request, he hands over to our team. The answers are generated automatically and may contain errors. We process the content of your messages, the page you write from and the country you write from. If you sign in to your customer account, your name, your email address and your orders are added. According to Shopify, Shopify processes the chat content to generate the answers and to continuously improve the AI assistant. For this improvement, Shopify also uses the chat content for its own purposes. If you do not want this, please write to us by email instead. Please do not enter payment details, passwords or health data in the chat.

WhatsApp: If you write to us via WhatsApp, we process your phone number, your profile name and your messages in order to reply to you. The provider for Switzerland and the EEA is WhatsApp Ireland Limited, Dublin. WhatsApp also processes connection and usage data for its own purposes and may transfer data to WhatsApp LLC in the USA, which is certified under the Swiss-U.S. Data Privacy Framework. WhatsApp’s privacy policy

6a. Service, repair and warranty

If you give us an appliance for service, for repair or as a warranty claim – in our shop in Bern or Zürich, by shipping, by pick-up or via our online form – we process:

• your contact details (name, address, email, phone) and whether you are placing the order as a private individual or for a company;
• information about the appliance: brand, model, serial number, age, proof of purchase or order number, fault description and accessories;
• the condition report with photos, the photos and videos you send us and your signature on the service order;
• the order data: cost cap, cost estimate, approvals, work carried out, parts replaced, invoice and payment.

We use this data to process and document your order, assess a warranty claim, keep you informed of progress, invoice and protect our rights. Without the mandatory information, we cannot accept the order. We record the orders in our order app «CCC Serviceannahme». It runs in our Shopify admin and stores order data, photos and files with Cloudflare in data centres in the EU; a version of the app runs on Claude by Anthropic (section 6b). We create the orders in Shopify as draft orders (section 3).

Service portal: If you report a defect or warranty claim, transport damage, a wrong or missing item, a parcel that has not arrived or an exchange in the service portal, we process the information you provide, your order data from Shopify (order number, items, shipping and delivery status), your contact details and the photos, videos and receipts you upload. We store the requests in our shipping app «CCC Versand» and the files with Cloudflare in data centres in the EU. You automatically receive a confirmation with a case number and, if we ask you for something more and you do not reply, a reminder. These emails are generated from fixed templates, without AI. To prevent anyone from trying out other people’s orders, we store for no more than two days how often searches or reports are made from an IP address or for an email address. Whether a defect is covered is decided by people. Whether an item can be exchanged or a parcel already counts as late is shown by the portal according to the rules of our Terms and Conditions (clause 8) and the shipping status; if you disagree, write to us and a person will check.

Who receives the data:

• Partner workshop or general importer: Depending on the brand, a partner workshop or the Swiss general importer carries out the work. They receive the appliance, the fault description and the photos, and your contact details only if they are needed for queries or for pick-up.
• Manufacturer: In the case of a warranty claim, we pass on the serial number, date of purchase, fault description and photos to the manufacturer or its service centre, and your contact details only if the manufacturer requests them. Manufacturers may be based abroad (section 14).
• Shipping: For pick-up and return shipping, Swiss Post or a courier receives the necessary address data (section 5), and in the event of damage, the transport insurer receives the necessary information (Service Terms, clause 11).

How long: We keep order and warranty documents, including photos and the condition report, for up to 2 years after the appliance has been returned, or in the event of disputes until they have been resolved. We keep invoices and accounting vouchers for 10 years (section 15). We send you service reminders until you unsubscribe from them.

6b. Artificial intelligence (AI)

We use AI tools so that we can reply to you faster and better. With us, it is always people who make the decisions.

• Jackson (chat): see section 6.
• Claude (Anthropic) and ChatGPT (OpenAI): We use them to sort incoming emails (for example by type of request and urgency), to prepare replies to your emails and messages, to record enquiries as well as service and repair orders (app «CCC Serviceannahme», section 6a) and to create texts. For this purpose, these services may receive the content of your message, your contact details, order and job data and photos of your appliance. We only enter as much personal data as necessary. Every reply to you is checked and sent by an employee; AI drafts are never sent automatically. The only things we send automatically are confirmations and reminders from fixed templates, without AI (section 6a).
• Community and newsletter: Jackson, our AI advisor, also uses Claude to draft replies in the Community (section 6c). For this, Claude only receives the title and text of the post and the previous replies, without the names and contact details from the customer account. Such a reply is only published once someone from our team has checked it; it is labelled as a reply from an AI. For our newsletter, Claude drafts texts based on new products, blog articles and the titles of selected Community posts, also without names.
• Providers: For Claude, our provider is Anthropic Ireland, Limited, and for ChatGPT, OpenAI Ireland Limited, both in Dublin, Ireland. They process the data we enter as independent controllers in accordance with their privacy policies, including in the USA: Anthropic’s privacy policy, OpenAI’s privacy policy. We have switched off the use of our input for training their AI models with both providers; exceptions provided for by the providers in their terms, for example for security reviews, remain reserved.
• Automated decisions: Our AI tools do not decide on your order, your service order or a warranty claim. For automated fraud screening, see section 13.
• Without AI: If you do not want us to process your details with these tools, write to us at [email protected]. We will then handle your request without AI.

6c. Community

In our Community (coffeecoachingclub.ch/en/apps/service/community) you share questions, setups and recipes all about coffee. Our Terms and Conditions, clause 17a, apply. Experiences with products you bought from us: section 6f.

• What we process: your customer number, your first name and surname and your email address from your customer account, your posts, replies and images, your «hilfreich» (helpful) marks and your reports with their reason, each with the time. Your browser reduces the size of images before uploading; the camera’s location data is removed in the process. To protect against misuse, we count requests per IP address and per customer account; we delete these counters after two days at the latest. If we block an account from the Community, we store the duration and the reason.
• Why: to operate the Community, check posts before publication, inform you about new replies, prevent misuse and respond to reports and infringements of rights. We also analyse posts without names in order to improve our range, our guides and our advice.
• Who sees it: Posts, replies and images are public, with your first name and the first letter of your surname. Search engines can find them. We show individual posts in the newsletter, on our website and on our social media channels, with title, first name with initial and image. Only our team sees your email address and your full name. If we suspect criminal content, we may pass on data to the authorities within the limits of the law.
• Where: in our app «CCC Versand», stored with Cloudflare in data centres in the EU. Drafts by Jackson: section 6b.
• Notifications: When there are new replies to your post, we send you an email. You can switch this off in each of these emails and on the post.
• How long: until you delete a post. We then delete images immediately and texts after 30 days at the latest, together with your name and customer number; the same applies to rejected posts. Other people’s replies to a deleted post disappear with it. We delete resolved reports after 30 days. We delete temporary blocks two years after they expire; permanent blocks remain stored for as long as they apply. If your customer account is deleted, your posts appear as «Mitglied» (Member) and we remove your email address from the Community. On request, we delete all your posts, replies, images and marks ([email protected]). We cannot retrieve copies held by search engines or in newsletters already sent.

6d. Feedback after delivery

A few days after your order has been delivered, we ask you by email whether everything arrived safely; we ask the same person no more than once every 90 days, not for company orders and not if you have unsubscribed from the newsletter or from care reminders. We store your answer and your voluntary comment with the order, in our app «CCC Versand» with Cloudflare in the EU, and delete them 180 days after the email was sent. If you report a problem, the app creates a task for our team; we keep it like other enquiries (section 15). Whether you answered yes or no is recorded, without the comment, in our internal log for up to 13 months. After your answer, whatever it is, we show you a link to Google where you can write a review; Google’s privacy policy applies there. If we have already sent you a welcome email for the order (section 6g), we do not also ask about the delivery.

6e. Not too many emails

So that you do not receive too many emails from us, we record which type of email we sent you and when, for example a care reminder or a question after an appointment or after delivery. This determines whether and when the next email is sent. We delete this information after 180 days. This also includes the emails after a purchase and the coffee bean reminder (section 6g).

6f. Experiences (reviews)

For products you bought from us, you can share an experience in the Community: with stars (1 to 5), text and up to four photos, one per product. We do not offer discounts or prize draws for experiences. Section 6c and our Terms and Conditions, clause 17a apply.

• What we process: as in section 6c, plus your stars, the product and the number of the order in which you bought it. So that you can only choose products from your orders, we read your recent orders from your customer account when you write (products, order number, date). Of this, we only store the chosen product with the order number.
• Why: so that others can rely on genuine experiences when choosing («Verifizierter Kauf», verified purchase), for replies from our team and to improve our range and our advice.
• Who sees it: stars, title, text, photos, date, the product and your first name with the initial of your last name (or your display name) are public, in the Community and on the product page. Search engines can find them; from three experiences with a product, we also provide stars and experiences to search engines as structured data. Only our team sees the order number.
• Where and how long: in our app «CCC Versand» with Cloudflare in the EU, until you delete the experience; after that as in section 6c.

6g. Emails after a purchase and coffee bean reminder

After a purchase, you receive no more than two emails from us:

• Welcome email: two days after delivery of an order with a coffee machine or coffee grinder, with tips on setting up and caring for your device. It contains no advertising and is therefore also sent without your consent to tips and offers; you can unsubscribe with one click.
• Question about your experience: only if you have allowed us to send you tips and offers: once, 14 days after delivery (without delivery confirmation 17 days after shipping), without a reminder. It is not sent if we already sent you an email in the seven days before, and not for service, spare parts, gift cards and courses.

These emails are not sent for company orders, not for cancelled or refunded orders and not if you have unsubscribed. For this we use your first name, your email address and language, the items in the order, the status of your consent in your customer account and the delivery date from Shopify or from Swiss Post tracking. For each order we store the order and customer number, the device, the delivery date, the status of your consent and which email we sent when, so that nothing arrives twice. We delete this information 200 days after delivery.

Coffee bean reminder, only if you ask for it: if you have allowed us to send you tips and offers, you can ask via the welcome email to be reminded about fresh beans. You choose a coffee and the interval (2, 3, 4 or 6 weeks). For this we store your email address, customer number and language, the coffee, the interval and the times of sign-up, reminders, clicks on the link to the coffee and your last bean purchase. So that no reminder arrives when you have just bought beans, we check whether your recent orders included coffee. After three reminders without a click and without a purchase, it stops by itself. Once it has ended, we delete the information after 90 days.

Unsubscribing: each of these emails has a link that unsubscribes you with one click. This also unsubscribes you from care reminders (section 6). You can also end the coffee bean reminder on its own. The links in the emails contain campaign parameters (UTM), which we only evaluate with Google Analytics with your consent (section 9). Everything is stored in our app «CCC Versand» with Cloudflare in the EU. Which emails we sent you is also recorded under section 6e.

7. Newsletter

For the newsletter we need your email address and your consent. Shopify stores the sign-up in our shop. For sending, we use Shopify Messaging, Shopify’s email function. Shopify Messaging uses a tracking pixel and the links to record whether you open an email and which links you click. This shows us which content interests you. You can unsubscribe at any time via the link in every email or by sending us a message.

8. Cookies and your settings

Cookies and similar technologies store information on your device or read it. On your first visit, our cookie banner asks what you allow:

• Strictly necessary: for example for the cart, sign-in and your cookie choice. These cookies are always active.
• Personalisation: remembers details about your visit so that we can adapt it next time.
• Analytics: shows us how our website is used (section 9).
• Marketing: for advertising and measuring its success (section 10).

You can refuse cookies and change your choice at any time: Open cookie settings. You can also delete or block cookies in your browser. The shop may then only work to a limited extent.

9. Web analytics

Shopify: For our shop statistics, Shopify records how visitors use the shop and what is ordered, within the limits of your cookie choice.

Google Analytics 4: If you allow «Analytics», we use Google Analytics to measure which pages are viewed, how you found us and how our calculators and simulators are used. For users in the European Economic Area and Switzerland, Google Ireland Limited in Dublin, Ireland, is responsible. Data may be transferred to Google LLC in the USA, which is certified under the Swiss-U.S. Data Privacy Framework. According to Google, Google Analytics 4 does not log or store IP addresses. Google Analytics keeps user-level data for no more than 14 months. Google’s privacy policy

Microsoft Clarity: Clarity shows us how our pages are used: clicks, scrolling and mouse movements, pages viewed, device and browser information and the country you access the site from. This is used to create heatmaps, analyses and recordings of individual visits. This data is collected and used by us and by Microsoft. Clarity only sets cookies such as _clck, _clsk, CLID and MUID once you have consented. Without your consent, Clarity sets no cookies but still records individual page views, without recognising you across pages. You can object to this at any time by sending us a message. Clarity only shares data with Microsoft Advertising for advertising purposes if you have consented to use for advertising. According to Microsoft, recordings are stored for 30 days, heatmaps and analysed click data for 9 months. The provider is Microsoft Corporation in the USA. Where Microsoft uses the data for its own purposes, Microsoft Ireland Operations Limited in Dublin is responsible for Switzerland and the EEA. Microsoft Corporation is certified under the Swiss-U.S. Data Privacy Framework. Microsoft’s privacy statement

10. Advertising and measuring success

If you allow «Marketing», Shopify transmits events such as page views, items in the cart and purchases to the following services, partly directly from the browser, partly from server to server. Your IP address, browser and device information and identifiers from our shop such as your email address may also be transmitted so that the platforms can match the events. This lets us show advertising on these platforms and measure whether it works. The platforms may link this data to your account with them. For collecting the data on our website and transmitting it to Meta and TikTok, we are jointly responsible with the respective platform. The platform alone is responsible for any further processing.

• Google Ads: Google Ireland Limited, Dublin, Ireland. Transfer to Google LLC, USA, certified under the Swiss-U.S. Data Privacy Framework. Google’s privacy policy
• Meta (Facebook, Instagram): Where the data protection law of the EEA or Switzerland applies, Meta Platforms Ireland Limited, Dublin, Ireland, is responsible. Transfer to Meta Platforms, Inc., USA, certified under the Swiss-U.S. Data Privacy Framework. Meta’s privacy policy
• TikTok: TikTok Technology Limited, Ireland, and TikTok Information Technologies UK Limited, United Kingdom. TikTok also stores data in the USA, Malaysia and Singapore and grants companies in other countries limited remote access (section 14). TikTok’s privacy policy
• Pinterest: Pinterest Europe Ltd., Ireland, together with Pinterest, Inc., USA. Pinterest, Inc. is certified under the Swiss-U.S. Data Privacy Framework. Pinterest’s privacy policy

11. Other third-party content

Your browser loads the following content directly from the providers when a page is opened. They receive technical information such as your IP address and your browser.

• HeyLight instalment notice: On product pages we show what financing via HeyLight would cost. The script for this comes from HeyLight.
• Google review badge: To show our Google reviews, your browser loads a script and an embedded frame from Google.
• Bundles and gifts in the cart: The Bundler and CartBot apps of Bundler.app, Ljubljana, Slovenia, load their scripts from their own servers. According to Bundler.app, the CartBot servers are located in Toronto, Canada. According to its own statement, Bundler.app does not store customer data from your orders.

Links to social networks, Google Maps and Tripadvisor: These are simple links. Data only goes to the respective platform when you click on them.

12. Other service providers

For individual tasks we use apps in the Shopify environment that may process order data for this purpose:

• Channable (ProductImpulse BV, Utrecht, Netherlands) for product data on comparison and sales platforms. Channable also processes order data on our behalf.
• Smart Automatic Discounts (E-Trade Partner P.S.A., Warsaw, Poland) for automatic discounts. Name, email address, phone number and address may be processed on our behalf.
• Apps by Shopify itself, for example for subscriptions, forms, discounts and labels. Section 3 applies to them.

13. Fraud protection

To protect us and our customers against fraud, we check orders with Shopify tools (Fraud Control). For this, name, email address, phone number, address, IP address, approximate location and browser and operating system are processed. If an order is rejected solely by automated means, you can state your point of view and request that a person reviews the decision.

14. Disclosure abroad

Country	Recipients	Basis
Ireland, Sweden, Netherlands, Slovenia, Poland and other EU and EEA states	Shopify, Stripe, Adyen, Klarna, Google, Meta, Microsoft, TikTok, Pinterest, WhatsApp, Bundler.app, Channable, E-Trade Partner, Anthropic, OpenAI	Adequate data protection according to the Swiss Federal Council
United Kingdom	TikTok	Adequate data protection according to the Swiss Federal Council
Canada	Shopify, Bundler.app (CartBot servers)	Adequate data protection according to the Swiss Federal Council (private sector)
USA	Google, Meta, Microsoft, Pinterest, WhatsApp, Cloudflare	Certified under the Swiss-U.S. Data Privacy Framework; the Swiss Federal Council has recognised adequate data protection for this since 15 September 2024
USA, Singapore	Shopify	Binding Corporate Rules and Standard Contractual Clauses
USA	Anthropic, OpenAI (section 6b)	We disclose the data to the Irish companies; the providers also process it in the USA under their own responsibility
Manufacturer’s country of domicile	Manufacturer or its service centre in the case of a warranty claim (section 6a)	EU and EEA: adequate data protection according to the Swiss Federal Council; other countries: necessary for handling the warranty claim in your interest (Art. 17(1)(b) FADP)
USA, Malaysia, Singapore, Australia, Brazil, China, Philippines	TikTok (storage or limited remote access)	According to TikTok, Standard Contractual Clauses
Canada, United Kingdom, Israel, Japan, South Korea	TikTok (limited remote access)	According to TikTok, adequacy decisions
Singapore	PayPal Pte. Ltd. as a possible payment processor of Shopify	Necessary to perform the contract with you (Art. 17(1)(b) FADP)
Worldwide (public blockchain)	USDC payment	Necessary to perform the contract with you (Art. 17(1)(b) FADP)
Country of delivery for shipments abroad	Shipping service providers	Necessary to perform the contract with you (Art. 17(1)(b) FADP)

You can request a copy of the safeguards from us. HeyLight and Klarna disclose data in accordance with their own privacy policies (section 4). If you use Apple Pay or Google Pay, your own agreements with these providers apply.

15. How long we keep data

We keep data for as long as we need it for the purpose or the law requires it:

• We keep business records and accounting vouchers, including invoices, for ten years from the end of the financial year in accordance with Art. 958f CO (Swiss Code of Obligations).
• Your customer account remains until you delete it or ask us to delete it.
• We keep enquiries by email, form, chat or WhatsApp, including photos and videos, for as long as we need them for processing, follow-up questions or to protect our rights. We may keep documents relating to statutory warranty and guarantee claims until the limitation period for statutory warranty claims expires, generally two years from delivery (Art. 210 CO).
• We keep emails for up to 10 years after the last message (general limitation period, Art. 127 CO). We delete copies of our automatic emails in the inbox of the app «CCC Versand» after 180 days.
• We keep service, repair and warranty orders, including photos, condition reports and signatures, for up to 2 years after the appliance has been returned, or in the event of disputes until they have been resolved.
• Requests in the service portal: we delete photos, videos and receipts 24 months after the request has been closed. After that, we remove the personal data from the request; only the type, date, outcome and items concerned remain for our statistics.
• We keep appointments and appointment requests for as long as we need them for planning, follow-up questions and to protect our rights. We keep vouchers for paid appointments for ten years, like all accounting vouchers.
• For care reminders, we store which reminders we have sent you and your unsubscribe request, so that you receive nothing more after unsubscribing.
• For the newsletter, we store your email address until you unsubscribe.
• Community: posts and replies until you delete them; after that, images immediately and texts after 30 days at the latest (section 6c).
• Feedback after delivery: 180 days after the email was sent (section 6d).
• Which emails we sent you and when: 180 days (section 6e).
• Experiences (reviews): until you delete them (sections 6c and 6f).
• Emails after a purchase: 200 days after delivery (section 6g).
• Coffee bean reminder: as long as it runs, then 90 days (section 6g).
• For Google Analytics and Microsoft Clarity, the periods in section 9 apply.

16. Security

We protect your data with technical and organisational measures. The connection to our website is encrypted. Nobody can guarantee complete security.

17. Your rights

• Access: You can ask whether and which data we process about you. Access is generally free of charge and provided within 30 days.
• Release and transfer: You can request data you have given us in a common electronic format.
• Rectification: We correct inaccurate data.
• Objection and erasure: You can object to processing and request that we delete your data. We do so unless we have to keep the data due to a legal obligation or have an overriding interest in processing it further.
• Withdrawing consent: You can withdraw consent at any time with effect for the future, for example in the cookie settings or via the unsubscribe link.

To do so, write to us at [email protected]. So that we do not give data to unauthorised persons, we may ask you to prove your identity. If you disagree with how we handle your data, you can contact the Federal Data Protection and Information Commissioner: FDPIC, Feldeggweg 1, 3003 Bern, www.edoeb.admin.ch.

18. For people in the EEA, for example in Liechtenstein

If we offer goods to people in the European Economic Area or analyse their behaviour on our website, the General Data Protection Regulation (GDPR) also applies. We then rely on the following legal bases:

• Contract and pre-contractual measures, such as order, payment, shipping, service, repair and warranty orders and replies to your enquiries, as well as participation in the Community (Art. 6(1)(b) GDPR)
• Legal obligations, such as keeping accounting vouchers (Art. 6(1)(c) GDPR)
• Legitimate interests, such as secure operation of the shop, fraud protection, prompt advice in the chat, the preparation of replies and the recording of orders with AI tools, showing our reviews, financing notices and bundles as well as cookieless usage analysis with Clarity, the moderation of the Community, showing individual posts in the newsletter, on the website and on social media, feedback after delivery, limiting the number of emails we send, the welcome email after buying an appliance and keeping emails as evidence (Art. 6(1)(f) GDPR)
• Your consent for personalisation, analytics and marketing cookies, the newsletter, the question about your experience and the coffee bean reminder (Art. 6(1)(a) GDPR)

You have the rights under Art. 15 to 21 GDPR, in particular to access, rectification, erasure, restriction and data portability. You can lodge a complaint with a supervisory authority, in particular in the state where you live or work. In Liechtenstein this is the Datenschutzstelle, Kirchstrasse 8, Postfach 684, 9490 Vaduz, www.datenschutzstelle.li. The European Commission has recognised adequate data protection for Switzerland.

Right to object: If we process your data on the basis of legitimate interests, you can object at any time on grounds relating to your particular situation. You can object to direct marketing at any time without giving reasons.

19. Changes

We update this privacy policy when our processing changes. The version published here applies.