PRIVACY POLICY

Verantwortlich für die Bearbeitung personenbezogener Daten im Sinne des revidierten Schweizer Datenschutzgesetzes (revDSG) ist:

Tea Retail GmbH
c/o Tiger Stores (Switzerland) AG
Krongasse 2
6003 Luzern
Schweiz

E-Mail: basel@palaisdesthes.com

We process personal data in accordance with the revised Swiss Data Protection Act (revDPA) and the Data Protection Ordinance (DPO). We process personal data only to the extent necessary for the establishment, administration, and fulfillment of contractual relationships, as well as for the provision of our services.

3.1 When visiting our website

Every time you visit our website, information transmitted by your browser is automatically collected (server log files):

• IP address
• Date and time of access
• Pages viewed
• Referring URL (Referrer)
• Browser and operating system used

This data is used to ensure the technical operation of our website and to optimize it.

3.2 For orders

To process orders, we collect and process the following data:

• Title, first name, and last name
• Shipping address and billing address
• Email address
• Phone number (optional)
• Payment data (processed by the respective payment service providers)
• Order Details and Order History

3.3 When opening a customer account

When you open a customer account, we store the information listed above as well as the login credentials you have chosen. You can have your customer account deleted at any time by sending a request to basel@palaisdesthes.com.

3.4 When sending newsletters

We use Shopify Email to send out our newsletter. We use the double opt-in process: You will only be added to our mailing list after confirming your subscription via a link in the confirmation email. You can unsubscribe at any time by clicking the unsubscribe link in each newsletter.

We process your data for the following purposes:

• Processing of orders and contracts
• Communication with you (e.g., sending confirmations, customer service)
• Customer Account Management
• Sending the newsletter with prior consent
• Improving our website and our services
• Compliance with legal obligations (particularly record-keeping requirements under tax and commercial law)
• Protection of legitimate interests (e.g., fraud prevention, law enforcement)

We will only share your data to the extent necessary for the performance of the contract or if you have given your consent. Recipients include, in particular:

• Shopify Inc. (Canada/Ireland): Platform for our online store, hosting, and newsletter distribution
• Stripe Payments Europe Ltd. (Ireland): Credit card payment processing
• Wallee AG (Switzerland): Payment Processing
• TWINT AG (Switzerland): Payment processing via TWINT
• Swiss Post Ltd. (Switzerland): Shipping of orders
• Google LLC (U.S./Ireland): Web analytics (see section 7)

Our website uses cookies. Cookies are small text files that are stored on your device when you visit our website.

We use the following types of cookies:

• Essential cookies: required for the website to function (e.g., shopping cart, login)
• Functional cookies: to improve the user experience (e.g., language selection)
• Analytics cookies: used to analyze website usage (see Section 7)

We use Google Analytics 4, a web analytics service provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies and similar technologies to analyze how our website is used.

The information generated by the cookie is usually transmitted to a Google server and stored there. The IP address is truncated so that direct identification of individuals is not possible.

We use Google Analytics only with your consent, which you provide via our cookie banner. You can withdraw this consent at any time by changing your cookie settings.

For more information about data protection in Google Analytics: https://policies.google.com/privacy

We retain your data only for as long as is necessary for the purposes stated or as required by legal retention obligations (in particular, the 10-year retention requirement under Art. 958f of the Swiss Code of Obligations for business records).

Under the revDSG, you have the following rights:

• Information about the personal data we process
• Correction of inaccurate data
• Deletion or anonymization of your data
• Restriction of data processing
• Data portability (data access)
• Withdrawal of consent

To exercise these rights, please contact: basel@palaisdesthes.com

You also have the right to file a complaint with the Federal Data Protection and Information Commissioner (FDPIC): https://www.edoeb.admin.ch

We take appropriate technical and organizational measures to protect your data from unauthorized access, loss, or misuse. Data transmission on our website is encrypted (SSL/TLS).

We reserve the right to update this Privacy Policy to reflect changes in the law or changes to our services. The most current version is available on our website.