Last updated: 2 October 2026
This privacy policy explains how we process personal data when you visit kaffee-esepads.ch, place orders, use customer accounts or communicate with us. It is governed by the Swiss Federal Act on Data Protection (FADP). Where applicable in an individual case, we also take foreign data protection law into account.
1. Data controller
kaffee-esepads.ch
Michelli Design
Limmatstrasse 50
8005 Zürich
Switzerland
[email protected]
+41 77 285 56 88
2. Data we process
- Basic and contact details: Name, billing and delivery address, email address, telephone number and customer account.
- Order and contract data: Products, prices, vouchers, payment method, payment status, delivery, returns, support cases and warranty or guarantee claims.
- Payment data: Transaction identifiers and status information. Full card or bank account details are generally processed directly by the selected payment service provider.
- Communication data: Messages, enquiries, reviews and any documents or photographs provided voluntarily.
- Technical data: IP address, time, device, browser, pages visited, referrer, log and security data, cookie and consent status.
- Usage and marketing data: Interactions with the shop, emails and advertising, where consent is required and has been given.
3. Purposes
We process personal data to provide and secure the shop, process orders and payments, make deliveries, manage customer accounts and loyalty features, handle support cases and defect, warranty and guarantee claims, meet statutory accounting and retention obligations, prevent misuse, and analyse and develop our offering. Advertising and non-essential analytics take place only within the scope of applicable law and, where required, with consent.
4. Recipients and data processors
Data is disclosed only where necessary for the stated purposes, where consent has been given or where required by law. Recipients may include hosting, CDN and security providers such as Cloudflare, IT and email service providers, warehousing and logistics partners such as Schweizerische Post or Planzer, accounting and advisory services, and public authorities.
Depending on the selected payment method, we use Payrexx (including TWINT and the cards offered), Stripe, PayPal, HeyLight and bank transfer, where the relevant payment method is offered at checkout. Each service processes the data required for payment under its own privacy policy.
Google services, in particular Google Site Kit and, where applicable, Google Analytics, are used for statistics and reach measurement only in accordance with consent settings. Technical usage data may be transmitted to Google in the process.
5. Cookies, analytics and consent
Necessary cookies and similar technologies enable the basket, checkout, sign-in, security and saved privacy settings. Statistics, marketing and external media services are loaded only where permitted by applicable law and where any required consent has been given. You can change your selection at any time using the privacy settings in the website footer. Withdrawal of consent takes effect for the future.
6. Disclosure abroad
Some service providers process data outside Switzerland or the European Economic Area. In such cases, we seek to ensure adequate data protection, for example through an adequacy decision, recognised standard data protection clauses or a statutory exception. Access from the provider's country of establishment cannot be fully ruled out for US and other international providers.
7. Retention
We retain data only for as long as necessary for the relevant purpose, performance of the contract, defence against claims and statutory obligations. Accounting records, invoices and business correspondence are generally retained for ten years. Customer accounts are retained until deletion or until further retention is no longer necessary. Technical logs are generally kept for a shorter period unless a security incident requires longer retention.
8. Data security
We take appropriate technical and organisational measures against loss, misuse, unauthorised access and unlawful alteration. However, entirely risk-free transmission or storage of data cannot be guaranteed.
9. Rights of data subjects
Within the scope of applicable law, you may request access to, correction of, delivery or transfer of your data, as well as deletion or restriction of processing. Consent may be withdrawn at any time with effect for the future. Statutory retention and evidentiary obligations and overriding legitimate interests remain reserved. Requests can be sent to [email protected]. You may also lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC).
10. Automated decisions
As a rule, we do not make exclusively automated decisions with significant legal effects. Payment and security service providers may carry out automated fraud or creditworthiness checks under their own rules.
11. Changes
We may amend this privacy policy if our processing activities, services or the legal situation change. The version published on this website applies.