Privacy Policy

1. Data Controller / Responsible Party

The entity responsible for processing personal data on this website is:

Christopher Hahne
Gurtenweg 19, 3074 Muri b. Bern, Switzerland
contact [at] sonolisk.com

2. What Data We Collect & Why

a) When You Visit the Website

When you access our website, the web server automatically collects certain information that your browser transmits. This may include:

• Your IP address
• Date and time of the request
• Browser type and version
• Operating system
• Referrer URL (the page you visited before)

We collect this data because it is technically required to deliver the website content to you and to ensure the stability and security of our services.

b) When You Use the Online Shop / Register / Purchase

If you place an order, register, or otherwise use the shop's services, we collect the following personal data:

• Full name
• Email address
• Postal address
• Payment information (only as needed for purchase)

These data are necessary for processing the contract you enter into with us (order fulfillment, billing, delivery). The legal basis for this processing is contractual performance under Swiss FADP Art. 6 and/or GDPR Art. 6(1)(b).

c) Payment Processing

We use PayPal for payment processing. Your payment data (e.g. credit card or PayPal account information) is handled directly by the payment provider - we do not store sensitive payment credentials on our servers.

3. Sharing Data with Third Parties

We will only share your data when required to fulfill the contract (e.g. with payment service providers, shipping services) or when legally obligated to do so (e.g. tax regulations). We do not sell or rent personal data to third parties for marketing or other purposes.

4. Data Retention

We retain your personal data only as long as necessary for the respective processing purpose (e.g. for the duration of your order and any legal retention obligations), or until you request deletion of your data, whichever comes first.

5. Your Rights as a Data Subject

Under applicable data protection law (Swiss FADP and, where applicable, GDPR) you have the following rights concerning your personal data:

• Right of access - you may request a copy of the personal data we hold about you
• Right to rectification - you may request correction of inaccurate or incomplete data
• Right to erasure (right to be forgotten) - under certain conditions, you may ask us to delete your data
• Right to restriction of processing - under certain conditions, you may ask us to limit how we use your data
• Right to data portability - you may request to receive your data in a structured, commonly used, and machine-readable format
• Right to object to processing - you may object to processing for which we rely on legitimate interests (if applicable)
• Right to withdraw consent - if processing is based on consent, you may withdraw your consent at any time (without affecting prior processing)

To exercise any of these rights or for any questions about our data processing, please contact us by email.

6. Data Security & Protection

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction or manipulation. Sensitive payment data is processed by trusted payment providers and not stored on our servers.

7. Cookies, Tracking & Analytics

We may use cookies or similar technologies to support website functionality, remember preferences, or collect usage analytics (e.g. to improve site design and performance). If we do so, we will inform you explicitly (e.g. via a cookie banner) and - if required by applicable law - request your consent. You may disable or delete cookies via your browser settings, though this might affect site functionality.

8. Transfers Outside Switzerland / International Data Transfers

If any personal data is transferred to a country outside Switzerland or the European Economic Area (EEA), we will ensure adequate safeguards are in place (e.g. standard contractual clauses, adequacy decisions, or other legally recognized mechanisms), and we will notify you about such transfers where required by law.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time (e.g. to reflect changes in applicable law or changes in our services). We will publish the updated version here and indicate the date of last revision. Please check this page periodically to stay informed.

10. Contact

If you have any questions about data protection or this policy, you can contact us at the address and email above.

11. Right to Lodge a Complaint with a Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with:

• Swiss Federal Data Protection and Information Commissioner (FDPIC)
  Feldeggweg 1, 3003 Bern, Switzerland
  www.edoeb.admin.ch

For residents in the EU/EEA, you may also contact your local data protection authority.