Privacy policy
We process personal data in accordance with the Swiss Data Protection Act (FADP) and, where applicable, the GDPR.
Data controller
Zerdawa GmbH
Bruggerstrasse 11C, 5103 Wildegg
info@swissbaklava.ch
What data we process
When you order we collect your name, delivery and billing address, email and phone. With an account we also store your order history.
Purpose
We use your data solely to process your order, for delivery, customer service and to meet legal obligations.
Analytics
We use Umami, a cookie-free, anonymised analytics tool that does not create personal profiles. Only if you agree in the cookie notice do we also use Google Analytics 4 (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Google Analytics sets cookies and records which pages you visit, which products you view and add to your cart, and orders with their order number and amount. We do not pass on names, email addresses or postal addresses. Google Analytics does not store IP addresses, and advertising features and Google Signals are switched off. The data is deleted after 14 months. Google may also process data in the USA and relies on the Swiss-U.S. Data Privacy Framework and standard contractual clauses for this. You can withdraw your consent at any time via Cookie settings at the bottom of the page.
Payment
We process online payments through Stripe (Stripe Payments Europe Ltd., Dublin, Ireland). You enter your payment details directly in Stripe's payment field. They never reach us, and we do not store them. To process the payment, we pass Stripe the amount, an order reference and your name, email address, phone number and billing address. Depending on the payment method, other providers also process your details: TWINT AG in Zurich for TWINT (details from your TWINT app), Apple or Google for Apple Pay and Google Pay (details from your digital wallet), and Amazon Payments Europe S.C.A. in Luxembourg for Amazon Pay (details from your Amazon account). If you choose Klarna, Klarna Bank AB (publ) in Stockholm, Sweden, receives your order and contact details and may check your identity and creditworthiness. These providers process the data under their own privacy policies. If you save your details with Link, Stripe's payment service, Stripe's privacy policy applies there as well. Stripe may also process data in the USA and safeguards these transfers with the Swiss-U.S. Data Privacy Framework and standard contractual clauses. You can read more in Stripe's privacy policy at stripe.com/ch/privacy.
Cookies
Without your consent, we only use technically necessary cookies (cart, login). At the payment step, Stripe also sets the cookies __stripe_mid and __stripe_sid, which help prevent fraud and are needed for the payment. We only set Google Analytics cookies (_ga, _ga_…) if you agree in the cookie notice. We do not use advertising cookies.
Your rights
You have the right to access, rectify, delete and receive your data. Contact us by email at any time.
Retention
Order data is retained for ten years to meet statutory accounting obligations, then deleted.