Privacy

In Switzerland, the Federal Act on Data Protection (FADP) applies. We comply with it. As a matter of principle, we also follow the stricter General Data Protection Regulation of the EU (GDPR): we only collect what we need, say openly what for, and shape your rights the way the GDPR provides. We make one exception for statistics and advertising: in Switzerland, they run under Swiss law from your first visit, and you can switch them off at any time. If you visit us from outside Switzerland, we ask first.

The key points in brief

• We need your data so that your order arrives, we can reply to you and our website gets better.
• We do not sell your data.
• If you pay online, we never see your card or account details. They go straight to our payment service provider.
• You can switch off statistics and advertising at any time via “Cookies” at the very bottom of every page.
• You may find out at any time what we have stored about you, and have it corrected or deleted. An email is enough.

Who is responsible for your data

VielfaltWerk GmbH
Sunnenbergstrasse 15
8633 Wolfhausen
Switzerland

Your contact person is Felix Bircher, who can be reached at info@vielfaltwerk.ch or on 076 416 71 75.

When you visit our website

Our website and its database run on Cloudflare. When a page is opened, technical details are generated: your IP address, the date and time, the address opened and your browser. Cloudflare needs them to deliver the pages quickly and protect them against attacks; this is our legitimate interest in a secure shop. The logs of our website are deleted after a few days.

We serve fonts and images ourselves. We do not embed posts from Instagram or YouTube: our links to Instagram, Facebook, LinkedIn and WhatsApp are ordinary links, and their rules only apply there once you have clicked. WhatsApp belongs to Meta.

When you order

For your order we need your name, address and email address, and your phone number if you wish. They are necessary for the purchase contract: we use them to send you the confirmation, and, if you pay by invoice or prepayment, the invoice as well, and to get your parcel on its way. If you send a gift to someone else, we use that person's name and address only for the delivery. Some partners receive exactly what they need:

• Our partner workshops: many products are sent to you directly by the workshop that makes them. For this, it receives your name, your delivery address and the items ordered.
• Swiss Post or another parcel service: the details shown on the parcel.
• Payrexx: Twint, card, PostFinance Pay and Klarna are handled by Payrexx AG in Thun. It receives the amount, the order number and your email address. You enter your card or account details directly with Payrexx; they never reach us. If you choose Klarna, Klarna itself checks whether invoice or instalments are possible; Klarna's own information applies to this.
• Resend: we use this service to send order confirmations, invoices and delivery notes by email.

For products for ages 18 and over, we ask at checkout for your date of birth and part of the machine-readable line of your identity document. We check the details and store with the order your date of birth and the result of the check, never your document number.

Your customer account

You do not need an account; you can also order as a guest. If you create one, we store your details, your orders and your VielfaltWerk Thank You. We store your password in such a way that nobody can work it back out, not even us. If you would like to delete your account, you can do so yourself in your customer account, or write to us. Orders that we are required by law to keep then remain stored without an account.

When you write to us

If you write to us using a form, by email or WhatsApp, or if you call, we use your details to reply to you. We store enquiries from our forms in our system, and emails land in our mailbox at Microsoft. We keep them for as long as is needed for your request and any follow-up questions.

Newsletter

If you sign up for the newsletter, you consent to us storing your email address and, if you give it, your name for this purpose. The newsletter is sent via Brevo (Sendinblue SAS, Paris). You confirm your sign-up by email and can unsubscribe with one click in every newsletter.

Search and gift finder

Our search and the gift finder work with artificial intelligence. We send your search text to Anthropic (USA), the company behind Claude, without any details about you. So it is best not to type in names or other personal details. We remember the answer so that the same question is quicker next time. We analyse which terms are searched for without the IP address. A cookie groups the searches of your visit and expires when you close the browser.

Cookies, statistics and advertising

Cookies are small files in your browser. The shop needs some of them in order to work: for your basket (30 days), your wishlist (180 days), signing in to your customer account (30 days) and the checkout. We keep similar things in your browser's storage, such as your cookie setting and what you enter at checkout, so that nothing is lost when you go back a page.

Then there are statistics and advertising. They show us what goes down well on the website and help to show our ads where they make sense. For this we use:

• Google Tag Manager, which loads the following services. We load it via our own address, and the measurement data also reaches us first. From there it is passed on to Google unchanged. This changes nothing about the recipient, the data or your choice under “Cookies”.
• Google Analytics for visitor numbers: which pages are viewed, which in the case of a search includes the search text. Google uses your IP address to determine the country and, according to Google, does not store it.
• Google Ads, to see which ad led to an order. After an order, the email address, phone number and address are sent to Google in unrecognisable (hashed) form. If you have a Google account with the same details, Google can link the order to that account.
• Meta Pixel, so that we can show suitable advertising on Facebook and Instagram. Meta can link your visits to your account there.

If you visit us from Switzerland, a short notice points this out on your first visit. From outside Switzerland we ask first, and statistics and advertising only run once you agree. If you do not want statistics or advertising, you can switch them off under Cookies at the very bottom of every page. Your setting is valid for twelve months. Through Google's Consent Mode, the services respect it: Google Analytics and Google Ads then no longer set cookies and only report, without an identifier, that a page has been opened, and the Meta Pixel no longer loads.

Where your data goes

We only pass data on to service providers that we need for the purposes described. Most of them process it only on our behalf. Google, Meta, Klarna and Swiss Post also use data for their own purposes and are themselves responsible for that.

• Cloudflare: running the website (USA, database in Europe)
• Payrexx: payment (Switzerland)
• Klarna: payment, if you choose Klarna (Sweden)
• Resend: emails about orders, enquiries and your account (USA)
• Brevo: newsletter (France)
• Microsoft: our email mailbox (group based in the USA)
• Anthropic: artificial intelligence in search and gift finder (USA)
• Google and Meta: statistics and advertising (Ireland and USA)
• Partner workshops and parcel services: delivery (Switzerland)

If a service provider is located in a country without equivalent data protection, such as the USA, it is either certified under the Swiss-US Data Privacy Framework, which Switzerland recognises, or bound by the EU's standard contractual clauses, which the FDPIC recognises with adaptations for Switzerland.

How long we keep data

Only for as long as we need it or the law requires. Orders and invoices: ten years, as prescribed by the Swiss Code of Obligations. Customer account: until you have it deleted. Newsletter: until you unsubscribe. Basket: 30 days after the last change. Website logs: a few days.

Your rights

At any time, you can:

• find out which data we have stored about you,
• have incorrect data corrected,
• have processing restricted, for example while we are checking a correction,
• have your data deleted, unless we are required to keep it,
• receive your data in a commonly used format,
• object to processing or withdraw consent.

Write to us at info@vielfaltwerk.ch. We will get back to you within one working day and deal with your request as quickly as possible, within 30 days at the latest. So that nobody else can get at your data, we may check that the request really comes from you. If you are not satisfied with our answer, you can contact the Federal Data Protection and Information Commissioner (FDPIC), or in Liechtenstein and the EU the data protection authority of your country.

Security

The whole website is encrypted (https). Only we can get into our admin area, where orders and customer data are kept, and only with a one-time code when signing in. Decisions about you are made by a person here. The only automatic check is at checkout, which verifies whether the details for the proof of age are consistent. If something does not seem right, write to us.

Changes

If something about our website changes, we update this policy. The version on this page applies.

Wolfhausen, 17 September 2026