Privacy Policy

01 Who is responsible

[Company name and legal form], [street and number], [postcode and town], Switzerland. Questions about your data: hello@malaconda.com. [If Malaconda sells to people in the EU: name of the EU representative.]

02 What we collect and why

• Orders. Name, delivery address, email, phone if you give it, what you ordered and whether it is paid. We need this to deliver and invoice your order.
• Pro accounts. Business name, type, city, contact person, email, phone, who recommended you, and your orders. We need this to decide on access, show your prices and handle your orders.
• Ambassadors. Name, email, social media handle and what you tell us about your network. Once you are accepted: your code, the venues you introduced, your payouts and your bank details. We need this to run the programme and pay you.
• Messages. Whatever you send us through the contact form, the “where to find it” form or by email. We use it to answer you.
• Newsletter. Your email address, only if you sign up. Every newsletter has an unsubscribe link.
• Technical data. IP address, time of the visit, pages viewed and browser. Our host keeps this in server logs for [number] days to keep the site secure.

03 Cookies and storage on your device

This site stores your cart in your browser so it is still there when you come back. It sets no advertising or analytics cookies. [Update this if analytics, pixels or embedded content are added. Fonts should be served from our own server, not from Google.]

04 Who receives your data

We pass on only what each of these needs to do its job:

• Hosting: [provider, country]
• Payment: [provider, country]. Card and TWINT details go straight to them and never reach us.
• Delivery: [carrier]
• Email and newsletter: [provider, country]
• Accounting: [fiduciary or software, country]

We do not sell personal data. We hand data to authorities only where the law requires it.

05 Data outside Switzerland

Some of these providers process data outside Switzerland and the EU. Where a country’s data protection is not recognised as adequate, we rely on the standard contractual clauses or on the provider’s certification under the Swiss-U.S. Data Privacy Framework. [List the countries.]

06 How long we keep it

• Orders and invoices: 10 years, as Swiss accounting law requires.
• Accounts: for as long as the account exists.
• Applications and messages: [12] months after our last contact.
• Newsletter: until you unsubscribe.

07 Your rights

You can ask what we hold about you, have it corrected or deleted, have it handed to you in a common format, object to how we use it, and withdraw a consent you gave. Email hello@malaconda.com and we answer within 30 days. You can also complain to the Federal Data Protection and Information Commissioner (edoeb.admin.ch) or, if you live in the EU, to your local data protection authority.

08 Legal basis

We process personal data under the Swiss Federal Act on Data Protection. For people in the EU, the bases under the GDPR are: performing a contract with you, your consent, our legitimate interest in running and securing the shop, and our legal duties such as bookkeeping.

09 Security and changes

The site is served over an encrypted connection and only the people who need your data to do their job can see it. If we change this policy, the new version appears here with a new date.