Privacy Policy

Privacy Policy

Effective date: 7 September 2026

Authoritative version: This English text is a translation. In the event of any discrepancy or conflict, the German version is legally authoritative.

1. Controller

The controller responsible for processing personal data in connection with fotzsick.ch is Fotzsick, a sole proprietorship owned by Andreas Suter, Höfli 51, 8555 Müllheim, Switzerland, email: info@fotzsick.ch.

2. Scope and legal framework

This Privacy Policy explains which personal data Fotzsick processes when a person visits the online shop, places an order, makes a payment, uses a customer account, contacts Fotzsick or subscribes to the newsletter.

Processing is primarily governed by the Swiss Federal Act on Data Protection. Where the European Union General Data Protection Regulation applies in an individual case, processing is carried out in particular to perform a contract, comply with legal obligations, pursue legitimate interests or on the basis of consent.

3. Personal data processed

Depending on how the online shop is used, the following data may be processed:

  • identity information such as name, billing address and delivery address;
  • contact information such as email address;
  • order, product, payment and transaction information;
  • information associated with an optional customer account;
  • the content of enquiries and other communications;
  • newsletter subscription, consent status and unsubscribe information;
  • technical data such as IP address, browser, device, timestamps, pages visited, cart contents and cookie data;
  • information used to prevent fraud and misuse.

4. Purposes of processing

Fotzsick processes personal data in particular for the following purposes:

  • operating, securing and technically providing the online shop;
  • displaying products and managing the shopping cart;
  • processing payments, producing, shipping and reversing orders;
  • providing optional customer accounts;
  • providing customer service and responding to enquiries;
  • sending the newsletter and managing unsubscribes;
  • preventing and investigating fraud or misuse;
  • complying with statutory retention, accounting and documentation obligations;
  • establishing, exercising or defending legal claims.

5. Shopify

The online shop is operated using Shopify. Personal data relating to customers in Switzerland is initially processed by Shopify International Limited in Ireland. Shopify Inc. in Canada and other affiliated companies and subprocessors may participate in providing the platform.

Shopify generally processes customer data as a processor on behalf of Fotzsick. For its own services, such as Shop or Shop Pay, Shopify may act as a controller for certain processing activities. In those cases, Shopify's privacy information and terms also apply.

Shopify may process personal data in Switzerland, the European Economic Area, Canada, the United States, Singapore and other countries. According to Shopify, recognised transfer mechanisms are used, in particular Binding Corporate Rules and, where required, Standard Contractual Clauses.

6. Payment processing

Depending on the payment method selected, payments are processed through Shopify Payments, TWINT, the participating card schemes, Shop Pay, Apple Pay, Google Pay and their technical or financial service providers.

Payment information is transmitted directly to the participating payment providers. Fotzsick does not receive complete card numbers and receives only the transaction information required for the order, payment confirmation, fraud prevention and refunds. The payment providers' privacy notices also apply to processing for which they act independently.

7. Shipping

For delivery, Fotzsick provides the necessary information, in particular the customer's name, delivery address and shipment-related contact information, to Swiss Post and, where applicable, technical shipping providers. This information is used only for dispatch, delivery, tracking and the handling of transport incidents.

8. Customer accounts

A customer account is optional. Customer accounts hosted by Shopify use a code sent to the email address provided. Shopify processes the data required for the account, previous orders and sign-in on behalf of Fotzsick.

9. Newsletter

When a person subscribes to the newsletter, Fotzsick processes the email address, subscription time, consent status and technical evidence. The newsletter is sent using Shopify Email and contains information, in particular, about new drops and products.

Depending on the subscription process used, the subscription is completed when the form is submitted or after an additional confirmation. A person may unsubscribe at any time using the unsubscribe link in each newsletter or by emailing info@fotzsick.ch. Unsubscribing does not affect the lawfulness of newsletters sent before the unsubscribe request.

10. Cookies and similar technologies

Shopify uses cookies and similar technologies required for the shopping cart, checkout, language and region settings, secure sessions, customer accounts, fraud prevention and stable operation of the shop.

Shopify also sets its own statistics and marketing cookies (for example _shopify_y and _shopify_s), which measure visits to and use of the shop; Fotzsick uses this data solely for its own shop statistics. Fotzsick does not use Google Analytics. Meta advertising technologies are used only after you consent to marketing cookies.

Meta advertising technologies: through the Shopify sales channel "Facebook & Instagram", Fotzsick uses the Meta Business Tools Meta Pixel, Advanced Matching and Conversions API of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland ("Meta"). Events such as page views, product views, searches, cart actions, checkout initiation, payment-info events and purchases, including order value, currency and product identifiers, are transmitted to Meta in order to measure the reach and effectiveness of ads on Instagram and Facebook and to deliver more relevant ads. With Advanced Matching and the Conversions API, customer information such as name, city, email address or phone number may be transmitted in hashed form according to Meta's specifications and matched against Meta accounts; hashed values remain personal data. These technologies are activated only once you consent to marketing cookies via the shop's cookie banner. Consent can be withdrawn or changed at any time with effect for the future via the "Cookie settings" link in the shop footer. For the collection and transmission of certain event data through Meta Business Tools, Fotzsick and Meta are joint controllers under the Meta Business Tools Terms and the Meta Controller Addendum; further processing by Meta is carried out by Meta as an independent controller depending on the purpose. Details and controls ("Activity off Meta technologies") at https://www.facebook.com/privacy/policy.

In the checkout operated by Shopify and in Shopify's own features such as "Sign in with Shop" and Shop Pay, individual services may set their own cookies, including Google services and hCaptcha for abuse and bot prevention, as well as cookies of the Shopify domain shop.app. These services are embedded by Shopify and are subject to the privacy policies of the respective providers.

Cookies may also be deleted or blocked through the browser settings. Blocking technically necessary cookies may impair the shopping cart, customer account and checkout.

11. No sale of personal data; Meta advertising only with consent

Fotzsick does not sell personal data. For advertising purposes, data is disclosed to Meta only to the extent described in Section 10 and only with your consent; Meta may use this data for ad measurement and audience building. Fotzsick itself does not conduct credit checks, create its own advertising profiles or make decisions based solely on automated processing that have legal or similarly significant effects.

Shopify, payment providers and card schemes may use automated systems for payment processing and the prevention of fraud and misuse. When a person voluntarily uses Shopify's own services, such as Shop or Shop Pay, Shopify may process data in accordance with its own privacy terms.

12. International transfers

Recipients and service providers may be located in countries whose data protection laws do not provide a level of protection equivalent to Swiss law. Meta Platforms Ireland Limited may transfer data to Meta Platforms, Inc. in the USA. Meta Platforms, Inc. is certified under the Swiss-U.S. Data Privacy Framework, which the Swiss Federal Council has recognised as adequate since 15 September 2024. Where the Framework does not cover particular data or recipients, Fotzsick or Meta rely on appropriate safeguards, in particular Standard Contractual Clauses. Fotzsick relies on a statutory adequacy decision or appropriate safeguards, in particular recognised Standard Contractual Clauses. In individual cases provided for by law, a transfer may also rely on an exception, for example where the transfer is necessary to perform a contract.

13. Retention

Fotzsick retains personal data only for as long as necessary for the relevant purpose, performance of the contract, statutory obligations, or the establishment, exercise or defence of legal claims.

  • Order, accounting and invoice records are generally retained for ten years.
  • Customer account data is retained until the account is deleted or for as long as it is required for existing orders and statutory obligations.
  • Newsletter data is retained until the person unsubscribes and thereafter only for as long as evidence of consent or unsubscription is required.
  • Technical log and security data is retained for as long as required for operation, security and misuse prevention.

14. Rights of individuals

Subject to applicable law, individuals may in particular request access, correction, deletion, restriction, objection, and the release or transfer of certain personal data. Consent may be withdrawn at any time with effect for the future.

These rights may be subject to statutory limitations, particularly where data must be retained to comply with legal obligations. Requests should be sent to info@fotzsick.ch. Fotzsick may request information required to securely verify the identity of the requesting person.

Individuals may also contact the Swiss Federal Data Protection and Information Commissioner or, where the General Data Protection Regulation applies, a competent European data protection supervisory authority.

15. Data security

Fotzsick and its service providers implement appropriate technical and organisational measures to protect personal data against unauthorised processing, loss, alteration or disclosure. However, completely risk-free transmission or storage of data cannot be guaranteed.

16. Amendments

Fotzsick may amend this Privacy Policy if its processing activities, services or legal requirements change. The version published on fotzsick.ch at the relevant time applies.

This English text is a translation. In the event of any discrepancy or conflict, the German version is legally authoritative.