Privacy Policy
Last updated: 10 October 2026
1. Who is responsible
LUWA Swiss GmbH
Oberibergerstrasse 1
8842 Unteriberg
Switzerland
E-mail: info@luwaswiss.ch
Company ID: CHE-257.598.553
For any question about data protection, please write to the address above. We handle these enquiries by e-mail only.
2. Scope
This policy covers our online shop at luwaswiss.ch and e-mail correspondence with us. It follows the Swiss Data Protection Act (FADP) and, where applicable, the European General Data Protection Regulation (GDPR).
3. What data we process
Order data: name, delivery and billing address, e-mail address, phone number (if provided), items ordered, order number, payment method and payment status.
Account data, if you create a customer account: name, e-mail address, login credentials, order history, saved addresses.
Correspondence: the content and time of the messages you send us.
Usage data: IP address, browser and device type, date and time of access, pages viewed, referring website.
Payment details themselves — card numbers, account details — are collected and processed directly by the payment provider. We neither see nor store them.
4. Why we process it
- Performing the contract: accepting and fulfilling orders, shipping, returns, refunds, warranty, customer service.
- Legal obligations: accounting, retention of business records, tax and customs requirements.
- Running and securing the shop: fraud prevention, troubleshooting, protection against misuse. This rests on our legitimate interest in a working, secure shop.
- Measuring reach and advertising: we use the Meta pixel for our posts and advertisements on Facebook and Instagram. This happens only with your consent. We do not send a newsletter.
5. Who we share data with
We share data only where it is needed to run the shop or where the law requires it.
Shopify. Our shop runs on the Shopify platform. Shopify processes the data arising in the shop on our behalf and operates servers outside Switzerland and the EU for this purpose.
Payment providers. Payments are processed through Shopify Payments (credit and debit cards, including Visa and Mastercard), TWINT and PayPal. The provider you choose receives the data needed to settle the payment.
Shipping providers. For delivery we pass on your name, delivery address and, where delivery requires it, your e-mail address or phone number.
Meta. See section 8.
Authorities, where we are legally obliged to do so.
We do not sell your data.
6. Transfers abroad
Data may be transferred to countries outside Switzerland and the European Economic Area, in particular through the operation of the shop on Shopify and through Meta. Where a country does not offer an equivalent level of protection, we rely on recognised safeguards, in particular the Standard Contractual Clauses of the European Commission.
7. Cookies
Our shop uses cookies. Necessary cookies keep your cart and session working and cannot be switched off. Any further cookies — including those for the Meta pixel — are set only if you agree in the cookie banner. You can change your choice at any time through the cookie settings in the shop. You can also delete or block cookies in your browser, though parts of the shop may then stop working properly.
8. Meta pixel (Facebook and Instagram)
We use the Meta pixel, a service of Meta Platforms Ireland Limited. It records which pages of our shop you open and whether you complete an order, and reports this to Meta. We use it to measure the reach of our posts and advertisements and to show advertisements to people who have already visited our shop.
The pixel loads only if you consent in the cookie banner. You can withdraw that consent at any time in the cookie settings, after which the pixel no longer loads. Meta also processes this data as a controller in its own right; details are set out in Meta's own privacy policy.
9. How long we keep data
We keep order and invoice data for as long as the statutory retention periods require — in Switzerland, ten years for business records and supporting documents. Customer accounts exist until you delete the account. E-mail enquiries are deleted once they are settled and no retention duty applies. Data we process on the basis of consent is deleted after you withdraw it.
10. Your rights
You have the right to obtain information about the data we hold about you, to have inaccurate data corrected, to have data deleted, to have processing restricted, to object to processing based on a legitimate interest, and to receive or transfer your data in a common format.
You may withdraw a consent at any time. This does not affect the lawfulness of the processing carried out before the withdrawal.
Please write to info@luwaswiss.ch. To protect your data we have to verify your identity before we provide information.
You also have the right to lodge a complaint with a supervisory authority — in Switzerland the Federal Data Protection and Information Commissioner (FDPIC), in the EU the authority of your country of residence.
11. Data security
We take appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access. Traffic in the shop is encrypted. No transmission over the internet can be made absolutely secure.
12. Children's data
Our offering is aimed at adults. We do not knowingly collect data from children. If you are a parent or guardian and believe we hold a child's data, please contact us and we will delete it.
13. Changes
We may update this policy when our processing or the legal requirements change. The version published on this page is the one that applies.
14. Contact
LUWA Swiss GmbH, Oberibergerstrasse 1, 8842 Unteriberg, Switzerland
E-mail: info@luwaswiss.ch