Information on this site is advertising in nature

GDPR Compliance

Last updated: August 2026

Our Commitment to Data Protection

Schweizer Geschenkwelt is committed to protecting the privacy and security of personal data in accordance with the General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (FADP).

Data Controller

Schweizer Geschenkwelt acts as the data controller for personal data collected through our website and services.

Contact details:
Schweizer Geschenkwelt
Bahnhofstrasse 42
8001 Zürich
Switzerland
Email: [email protected]

Your Rights Under GDPR

As a data subject, you have the following rights regarding your personal data:

Right to Access (Article 15)

You have the right to obtain confirmation as to whether personal data concerning you is being processed, and if so, access to that data along with information about how it is being used.

Right to Rectification (Article 16)

You have the right to have inaccurate personal data corrected and incomplete data completed.

Right to Erasure (Article 17)

Also known as the "right to be forgotten," you may request deletion of your personal data when:

  • The data is no longer necessary for its original purpose
  • You withdraw consent and there is no other legal basis for processing
  • You object to processing and there are no overriding legitimate grounds
  • The data has been unlawfully processed

Right to Restriction of Processing (Article 18)

You may request restriction of processing when:

  • You contest the accuracy of the data
  • Processing is unlawful but you oppose erasure
  • We no longer need the data but you need it for legal claims
  • You have objected to processing pending verification

Right to Data Portability (Article 20)

You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.

Right to Object (Article 21)

You have the right to object to processing based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making (Article 22)

You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects.

How to Exercise Your Rights

To exercise any of your rights, please contact us at [email protected] with your request. We will respond within 30 days. For complex requests, we may extend this period by up to two months, in which case we will inform you.

Identity Verification

To protect your privacy, we may need to verify your identity before processing your request. We may ask for additional information to confirm your identity.

Legal Basis for Processing

We process personal data based on the following legal grounds:

  • Consent: When you have given clear consent for specific purposes
  • Contract: When processing is necessary to fulfill our contractual obligations
  • Legal Obligation: When we must comply with legal requirements
  • Legitimate Interests: When processing is in our legitimate business interests, balanced against your rights

Data Processing Activities

We process personal data for the following purposes:

  • Processing and fulfilling service orders
  • Communicating with you about your inquiries and orders
  • Improving our services and website functionality
  • Complying with legal and regulatory requirements

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws. Specific retention periods are detailed in our Privacy Policy.

International Data Transfers

When we transfer personal data outside of Switzerland or the European Economic Area, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission.

Data Security

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

  • Encryption of data in transit
  • Regular security assessments
  • Access controls and authentication
  • Staff training on data protection

Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours. If the breach is likely to result in a high risk, we will also notify affected individuals directly.

Complaints

If you are not satisfied with how we handle your personal data or your rights request, you have the right to lodge a complaint with:

  • The Swiss Federal Data Protection and Information Commissioner (FDPIC)
  • Your local EU data protection authority (if you are an EU resident)

Updates to This Notice

We may update this GDPR compliance notice from time to time. We will notify you of any significant changes through our website or direct communication where appropriate.