Privacy Policy yoga-strap.ch

Version: September 2026

1. Controller

Glückskonzentrat, Sonja Marty
Klostermühlestrasse 12B
8840 Einsiedeln
Switzerland
Email: info@glueckskonzentrat.ch
UID: CHE-423.456.850

2. Principle

Protecting your personal data matters to us. We process your data exclusively on the basis of the Swiss Data Protection Act (FADP) and, where applicable, the European General Data Protection Regulation (GDPR).

3. Hosting and server logs

This website is hosted on a server in Switzerland (Plesk). Each time the website is accessed, the server automatically stores the following data:

  • IP address of the device used
  • Date and time of access
  • Page or file accessed
  • Browser and operating system used
  • Referrer URL (previously visited page)

This data is stored solely to ensure the technical operation of the site and to defend against attacks. It is not passed on to third parties. Logs are deleted automatically after 30 days at the latest.

Legal basis: legitimate interest (Art. 6(1)(f) GDPR / Art. 31 FADP)

4. Orders in the online shop

When you place an order in our online shop, we process the following data:

  • First and last name, company where applicable
  • Billing and delivery address
  • Email address and telephone number
  • Products ordered, quantities, amounts and order date
  • Payment method and payment status (no card details, see section 6)
  • Any comments you add to your order
  • Tracking number, where the consignment can be tracked

We need this data to perform the contract of sale: to process and ship your order, to handle payment, for customer service and to comply with our legal obligations.

Retention: Order and invoice data is retained for ten years due to statutory accounting and retention obligations (Art. 958f Swiss Code of Obligations). Earlier deletion is therefore not possible.

Legal basis: performance of a contract and legal obligation (Art. 6(1)(b) and (c) GDPR / Art. 31 FADP)

5. Customer account

You may open a customer account voluntarily. It stores your login details (email address and encrypted password), your saved addresses and your order history. The account makes future orders easier and lets you follow the status of your orders.

To confirm your email address, we send you a confirmation link when you register (double opt-in). You can have your account deleted at any time by sending us an email. Order and invoice data is not affected and is retained in accordance with section 4.

Legal basis: consent and performance of a contract (Art. 6(1)(a) and (b) GDPR / Art. 31 FADP)

6. Payment processing

For payments by credit card, TWINT and PayPal we use the payment service provider Stripe:

Stripe Payments Europe, Limited
1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland

When you pay, you are redirected to a secure page operated by Stripe. You enter your payment details – in particular card number, expiry date and security code – directly with Stripe. This data never reaches our website and is neither seen nor stored by us. From Stripe we only receive confirmation of whether the payment succeeded, along with a reference number.

The data transmitted to Stripe is your email address, the order amount, the order number and the items ordered. Stripe also processes data in the USA. The transfer is based on the European Commission’s Standard Contractual Clauses and on Stripe’s certification under the EU-U.S. Data Privacy Framework.

Further information: stripe.com/privacy

If you choose prepayment, you receive our bank details by email. Payment is made directly through your bank; we receive your name and the details of the credit entry.

Legal basis: performance of a contract (Art. 6(1)(b) GDPR / Art. 31 FADP)

7. Shipping and customs clearance

For shipping, we transmit your name and delivery address to Swiss Post (Post CH AG, Wankdorfallee 4, 3030 Bern). For consignments abroad, electronic customs data (sender, recipient, contents and value of goods) is additionally transmitted to Swiss Post and to the customs authorities of the destination country. This transmission is required by law and is a precondition for your consignment to be delivered.

Legal basis: performance of a contract and legal obligation (Art. 6(1)(b) and (c) GDPR / Art. 31 FADP)

8. Emails relating to orders

As part of an order, we send you an order confirmation, a confirmation of receipt of payment in the case of prepayment, and a shipping confirmation. These emails are part of performing the contract and cannot be unsubscribed from. We do not send a newsletter.

9. Contact form

If you use the contact form on this website, the following data is collected:

  • First and last name
  • Company (optional)
  • Email address
  • Content of your message
  • IP address (for technical reasons)

This data is used solely to handle your enquiry and is not passed on to third parties. Submissions are additionally stored in the database of this website (Avada Forms) so that enquiries remain traceable even if email delivery fails. Once your enquiry has been dealt with, the data is deleted unless statutory retention obligations apply.

Legal basis: consent (Art. 6(1)(a) GDPR / Art. 31 FADP)

10. Email delivery

All emails from this website – order confirmations, shipping confirmations, contact enquiries and password resets – are sent via Microsoft 365 (WPO365, Microsoft Graph). Microsoft processes the data as a processor in accordance with Microsoft’s privacy terms.

11. Cookies

This website uses the following cookies:

Cookie Provider Purpose Storage period
lean_shop_cart Lean Shop Strictly necessary, links your cart to you 30 days
lean_shop_items_in_cart Lean Shop Strictly necessary, indicates that items are in the cart (prevents cached pages from being served) 30 days
wordpress_logged_in_* WordPress Strictly necessary, keeps you signed in to your customer account Session, or 14 days with “Stay signed in”
wp-wpml_current_language WPML Strictly necessary, stores the selected language 1 day
fusionredux_current_tab Avada Strictly necessary, stores the active tab in the theme builder Session
privacy_embeds Avada Stores your consent for embedded content 1 year

Strictly necessary cookies are set without your consent, as they are required for the operation of the website and the online shop. We do not use any cookies for analytics, marketing or tracking purposes.

12. Fonts

This website uses fonts that are stored and served locally from our server. No connection is made to external servers (for example the Google Fonts CDN). Your IP address is not transmitted to third parties.

13. Security

  • SSL/TLS encryption – all data is transmitted in encrypted form (https)
  • Limit Login Attempts Reloaded – protection against brute-force attacks on the login area
  • WPS Hide Login – the default login URL has been changed for security reasons
  • Honeypot protection – contact and shop forms are protected against spam using a honeypot method (no Google reCAPTCHA)
  • Rate limiting of sign-in and registration attempts in the customer account
  • Disable XML-RPC – the WordPress XML-RPC interface is disabled

14. Caching

To improve loading times, this website uses WP Rocket. Static versions of pages are stored temporarily. The cart, checkout and customer account are excluded from caching. No personal data is processed or passed on.

15. Maintenance and backups

For maintenance, updates and backups of this website we use tools provided by our web service provider PM Webdesign. For technical reasons, this may involve access to website content and the database. Our service provider is contractually bound to confidentiality.

16. SEO

This website uses Yoast SEO for search engine optimisation. The plugin does not process any personal data of visitors.

17. Your rights

Under the Swiss FADP and the GDPR you have the following rights:

  • Right of access – you may request information about the data stored about you at any time
  • Right to rectification – incorrect data can be corrected
  • Right to erasure – you may request deletion of your data, unless a statutory retention obligation applies
  • Right to restriction – you may have processing restricted
  • Right to object – you may object to processing
  • Right to data portability – you may receive your data in a common format

To exercise your rights, please contact: info@glueckskonzentrat.ch

18. Right to lodge a complaint

You have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC):

FDPIC
Feldeggweg 1
3003 Bern, Switzerland
www.edoeb.admin.ch

19. Changes

We reserve the right to amend this privacy policy as necessary. The current version is always available on this page.