Privacy policy

1) Information on the Collection of Personal Data and Contact Details of the Controllers

1.1  Thank you for visiting our website and for your interest. Below we inform you about how we handle your personal data when you use our website. Personal data is any information that can personally identify you.

1.2  Our online shop is operated via Shopify Markets and serves customers across different markets through separate legal entities. Which entity is responsible for your personal data depends on the market in which you place your order:

For customers in Switzerland and Liechtenstein:

AMELI Zurich GmbH · Apollostrasse 9, 8032 Zurich, Switzerland · Tel.: +41 43 883 31 85 · Email: privacy@alemi-zurich.com

For customers in the European Union and all other markets (excluding Liechtenstein):

AMELI Zurich Eurotrade GmbH · Eythweg 12, 89542 Herbrechtingen, Germany · Tel.: +41 43 883 31 85 · Email: privacy@alemi-zurich.com

1.3  Where AMELI Zurich GmbH and AMELI Zurich Eurotrade GmbH jointly determine the purposes and means of processing personal data, they act as joint controllers within the meaning of Art. 26 GDPR. The key content of the joint controllership agreement can be requested via the contact details above.

1.4  For data subjects in Switzerland and Liechtenstein, the Swiss Federal Act on Data Protection (revFADP) additionally applies.

2) Data Collection When Visiting Our Website

2.1  When you visit our website for informational purposes only, we collect the following data (server log files): page accessed, date and time of access, data volume transferred, referring URL, browser and operating system, and IP address (anonymised where applicable). Legal basis: Art. 6(1)(f) GDPR. Log files are automatically deleted after 7 days.

2.2  This website uses SSL/TLS encryption to protect the transmission of personal data.

3) Hosting & Content Delivery Network

Our website is hosted by Shopify International Ltd., Ireland. Data may also be transferred to Shopify Inc., Canada, for which an adequacy decision by the European Commission exists.

4) Cookies and Tracking Technologies

We use cookies and similar technologies. Technically necessary cookies are set on the basis of Art. 6(1)(b) GDPR. All other cookies are only activated with your explicit consent (Art. 6(1)(a) GDPR). You can manage your consent at any time via our cookie consent tool (Pandectes GDPR).

Shopify (cart, _secure_session_id) – Shopping cart, technically necessary, Art. 6(1)(b) GDPR

Pandectes GDPR (_pandectes_gdpr) – Consent management, Art. 6(1)(c)(f) GDPR, 12 months

Meta Pixel (_fbp, _fbc) – Conversion tracking, consent required, 90 days

TikTok Pixel (_ttp) – Conversion tracking, consent required, 13 months

Google Analytics / GA4 (_ga, _ga_*) – Website analytics, consent required, 2 years

Google Ads (_gcl_aw) – Conversion tracking, consent required, 90 days

Pinterest Tag (_pinterest_ct_ua) – Conversion tracking, consent required, 1 year

Klaviyo (__kla_id) – Newsletter tracking, consent required, 2 years

Google Tag Manager – Technical integration tool, no own persistent cookies

Hotjar (_hjSessionUser_*, _hjSession_*) – Behavioural analysis, consent required

Microsoft Clarity (_clck, _clsk) – Behavioural analysis, consent required

5) Contact

Reviews.io: Invitation to review only with consent (Art. 6(1)(a) GDPR).

Gorgias: Ticketing system. Legal basis: Art. 6(1)(b) GDPR. Retention: 3 years.

Contact form / email: Your details are stored to process your enquiry. Legal basis: Art. 6(1)(b)(f) GDPR. Retention: 3 years.

6) Customer Account & Order Processing

We process personal data when you create a customer account or make a purchase. Legal basis: Art. 6(1)(b) GDPR.

We collect in particular: First and last name · Delivery and billing address · Email address · Payment data · Purchase history · Session and log data · Newsletter status

7) Comments

If you leave a comment, we store your name, IP address, the comment, and a timestamp. Legal basis: Art. 6(1)(b)(f) GDPR. Retention: 3 years.

8) Direct Marketing

Newsletter: Only with consent (double opt-in).

Existing customer marketing: Art. 6(1)(f) GDPR in conjunction with applicable marketing law.

Klaviyo: Email marketing. Klaviyo Inc., 125 Summer Street, Boston, MA 02110, USA. Retention: duration of consent + 3 years.

Post-purchase surveys: Fairing Inc., USA. Consent required. Retention: 3 years.

9) Order Fulfilment

Fulfilment: Alaiko GmbH – Sandstraße 33, 80335 Munich, Germany. Purpose: Warehousing, picking, and shipping. Art. 6(1)(b) GDPR, Art. 28 GDPR.

Returns: 8returns GmbH – Pappelallee 78/79, 10437 Berlin, Germany. Purpose: Returns processing. Art. 6(1)(b) GDPR, Art. 28 GDPR.

Shipping partners: DHL, Swiss Post.

Payment providers: Klarna Bank AB · PayPal (Europe) S.a r.l. · Shopify Payments · SumUp Payments Limited.

10) Web Analytics Services

Google Analytics / GA4: Consent required, IP anonymised.

Google Tag Manager: Technical integration tool.

Hotjar: Behavioural analytics. Hotjar Ltd., Malta. Consent required.

Klar!: E-commerce analytics. Klar AS, Norway. Consent required.

Microsoft Clarity: Behavioural analytics. Microsoft Corporation, USA. Consent required.

11) Retargeting & Advertising

All services below are only activated with your explicit consent (Art. 6(1)(a) GDPR):

• Meta Pixel (Facebook / Instagram)

• Google Ads Conversion Tracking

• Pinterest Tag

• TikTok Pixel

12) Website Features

YouTube videos, Google Maps, Google Web Fonts, Google reCAPTCHA. Used on the basis of your consent, except for reCAPTCHA (legitimate interest, Art. 6(1)(f) GDPR).

13) Cookie Consent Tool

We use Pandectes GDPR Compliance to manage and document your consents in accordance with Art. 6(1)(c)(f) GDPR. Retention: 12 months (configurable).

14) Your Rights as a Data Subject

• Right of access (Art. 15 GDPR)

• Right to rectification (Art. 16 GDPR)

• Right to erasure (Art. 17 GDPR)

• Right to restriction of processing (Art. 18 GDPR)

• Right to data portability (Art. 20 GDPR)

• Right to withdraw consent (Art. 7(3) GDPR)

• Right to object (Art. 21 GDPR)

• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

Data subjects in Switzerland may contact the Federal Data Protection and Information Commissioner (FDPIC).

How to submit a request: Email privacy@alemi-zurich.com. We will respond within 30 days (Art. 12(3) GDPR).

15) Retention Periods for Personal Data

• Order data & invoices: 10 years

• Customer account data: Until account deletion + 3 years

• Server log files: 7 days

• Newsletter consents: Duration of consent + 3 years

• Marketing cookies: As stated in Section 4

• Payment data: 10 years

• Customer service enquiries (Gorgias): 3 years

• Product reviews (Reviews.io): Until withdrawal of consent

• Post-purchase surveys (Fairing): 3 years

• Geolocation (GeoIP Redirect): No personal data stored

Last updated: June 2026