Privacy policy

Privacy Policy

1. Introduction and Data Controller

Thank you for your interest in our online store. Protecting your personal data is very important to us. This Privacy Policy explains which personal data is collected when you use our online store, the purposes for which it is processed, and your rights in relation to this processing.

Your personal data is processed in accordance with the Swiss Federal Act on Data Protection (FADP) and, where and to the extent applicable, the European Union General Data Protection Regulation (GDPR).

Data controller within the meaning of the FADP and GDPR:

Viviane Sauter

Annette-Kolb-Weg 6

79410 Badenweiler

Deutschland
Email: support@cc-hh.ch

2. Technical Operation of Our Website and Hosting

2.1 Domain Management and Email Hosting by Hostpoint

Our domain cc-hh.ch and our business email accounts are managed and hosted, respectively, by Hostpoint AG, Neue Jonastrasse 60, 8640 Rapperswil-Jona, Switzerland.

Hostpoint is responsible for the technical management of our domain, the necessary DNS services, and the operation of our business email accounts. Our online store is hosted and operated through Shopify (see Section 2.2).

As part of these services, the following personal data may be processed in particular:

  • IP addresses and technical connection data

  • Email addresses of senders and recipients

  • Content and attachments of email communications

  • Date and time of communications

  • Technical log data

Purpose of processing:

Ensuring the accessibility of our domain, providing our business email communications, and maintaining technical security and stability.

Legal basis:

Where the GDPR applies, processing is based on Article 6(1)(b) GDPR (performance of a contract or steps taken prior to entering into a contract) and Article 6(1)(f) GDPR (legitimate interest in secure and reliable business communications and technical infrastructure).

Retention period:

Personal data is stored only for as long as necessary for the respective purposes or as required by statutory retention obligations. Technical log data is stored in accordance with the service provider's operational and security requirements and subsequently deleted.

You have the right to object to this processing at any time on grounds relating to your particular situation.

2.2 Operation of the Online Store Through Shopify

Our online store is operated using the Shopify e-commerce platform.

Providers:

Shopify International Ltd., Victoria Buildings, 1–2 Haddington Road, Dublin 4, Ireland

Shopify Inc., 151 O'Connor Street, Ottawa, Canada

Shopify processes personal data on our behalf as a data processor in accordance with Article 28 GDPR.

Categories of data processed:

  • Name, billing address and delivery address

  • Email address

  • Payment and order data

  • IP address

  • Device and browser information

  • Usage and access data

Purpose of processing:

Provision and operation of the online store, order fulfilment, payment processing, customer management, fraud prevention, and system security.

Recipients include, in particular, Shopify's hosting and IT service providers, payment service providers, and technical support providers.

Legal basis:

Article 6(1)(b) GDPR (performance of a contract) and Article 6(1)(f) GDPR (legitimate interest in the secure and efficient operation of our online store).

Transfers of data to third countries:

Personal data may be transferred to Canada and the United States.

Shopify is certified under the EU-US Data Privacy Framework (DPF). In addition, EU Standard Contractual Clauses (SCCs) have been concluded with Shopify to ensure an appropriate level of data protection.

Retention period:

Data is stored only for as long as necessary for order fulfilment or as required by statutory retention obligations.

Further information about Shopify's data processing is available at:

https://www.shopify.com/legal/privacy

3. Cookies and Consent Management (Consentmo)

Our website uses cookies and similar technologies to provide the technical functions of our online store, save visitor preferences, analyse the use of our website, and optimise our advertising activities.

Cookies are small text files stored on your device. Other technologies, such as local browser storage, tracking pixels, and scripts, may also be used.

We distinguish between technically necessary technologies and optional technologies for preferences, statistics, and marketing. Where consent is required, these technologies are used only with your prior consent.

3.1 Consent Management Through Consentmo

To manage your cookie settings, we use the consent management tool “Consentmo GDPR” provided by:

Consentmo Ltd.
3 Warren Yard, Wolverton Mill
Milton Keynes, MK12 5NW
United Kingdom

Data processed:

  • IP address and technical connection data

  • Date and time of consent

  • Consent status and selected cookie categories

  • Device and browser information

  • Pseudonymous identifiers used to store consent decisions

Purpose of processing:

Obtaining, storing, managing, and documenting your cookie consent and implementing your selected privacy preferences.

Legal basis:

Where the GDPR applies, processing is carried out to comply with legal obligations pursuant to Article 6(1)(c) GDPR or on the basis of our legitimate interest in the technical management and documentation of consent pursuant to Article 6(1)(f) GDPR.

Where applicable, the storage of and access to information on users' devices is governed by Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG). Technologies requiring consent generally require prior consent.

Retention period:

According to Consentmo, the local identifier gdpr_prefs, which stores your cookie settings, has a retention period of one year.

Additional records of consent given or withdrawn may be retained for as long as necessary to comply with statutory documentation obligations.

3.2 Categories of Cookies Used

A. Strictly Necessary Cookies

These technologies are used to operate our online store, particularly the shopping cart, checkout process, and other technically necessary functions.

They cannot be disabled in the cookie settings.

Name Purpose Duration
cart Stores the contents of the shopping cart between visits 2 weeks
shopify_pay_redirect Stores the redirection status during the checkout process in the browser Session

Consentmo also lists the _shopify_y cookie, with a duration of one year, in the “Necessary” category. According to the description provided, this cookie is used for visitor analytics. Its classification as technically necessary under data protection law has yet to be reviewed.

B. Preference Cookies

These technologies store settings such as your selected language, region, or cookie preferences.

Name Purpose Duration
localization Stores the selected language and region 1 year
gdpr_prefs Stores cookie consent in local browser storage 1 year

Storing your consent decision may be technically necessary to implement your selected privacy preferences.

C. Statistics Cookies

Statistics technologies help us understand how visitors use our online store. This includes information about page views, visitor interactions, and the use of individual features.

We use Google Analytics 4 for this purpose.

Name Purpose Duration
_ga Distinguishes visitors for statistical analysis 2 years
_gid Distinguishes visitors within a single day 24 hours
gtag.js Script used to load Google Analytics functions Session-related

The stated durations correspond to the information recorded in Consentmo. Actual cookie lifetimes may depend on the technical configuration.

Legal basis: Your consent pursuant to Article 6(1)(a) GDPR, where the GDPR applies, and Section 25(1) TDDDG, where applicable.

Further information about data processing by Google Analytics can be found in Section 4.1 of this Privacy Policy.

**D. Marketing