Privacy Policy

Privacy Policy — Coffee Space GmbH

Information obligation according to Art. 19 of the revised Swiss Data Protection Act (revDSG)

1. Responsible entity

Responsible for data processing on this website is:

Coffee Space GmbH
Wellenried 2
3150 Schwarzenburg
Switzerland

E-Mail: [email protected]

Phone: +41 31 589 69 69

If you have questions about data protection, you can contact us at any time at the above-mentioned address or via e-mail.

2. General information on data processing

We take the protection of your personal data very seriously. We handle your personal data confidentially and in accordance with the legal data protection regulations — in particular the revised Swiss Data Protection Act (revDSG) — as well as this Privacy Policy.

Personal data is any information that relates to an identified or identifiable natural person. This includes, for example, your name, your e-mail address, your postal address, or your IP address.

When you use this website, various personal data is collected. This Privacy Policy explains which data we collect, what we use it for, and on what basis this occurs.

3. What data we collect and for what purpose

3.1 When visiting the website (Server log files)

When accessing our website, the web server automatically stores the following data in so-called server log files:

• IP address of the requesting device (anonymized)

• Date and time of access

• Name and URL of the retrieved file

• Website from which the access occurs (referrer URL)

• Browser and operating system used

• Status code of the access (successful / error)

This data is processed exclusively to ensure a trouble-free operation of the website, for error analysis, and for repelling attacks. It is not merged with other data sources and is deleted after a maximum of 30 days. The legal basis is our legitimate interest in the secure operation of the website (Art. 31 para. 1 revDSG).

3.2 When completing a purchase (Online shop)

When you place an order in our online shop, we collect the following data:

• First and last name

• Billing and shipping address

• Email address

• Phone number (optional)

• Ordered products and order history

• Payment information (the payment processing itself is handled by our payment service provider; we do not store complete credit card details)

We need this data for contract processing (Art. 31 para. 2 lit. a revDSG), that is, for processing your order, for delivery of the goods, and for invoicing. Without this data, we cannot fulfill the purchase contract.

Order data will be stored for the duration of the legal retention period (10 years according to Art. 958f OR) and then deleted.

3.3 Newsletter (E-Mail Marketing)

When you sign up for our newsletter, we collect your email address. The registration is done via a Double Opt-in procedure: After your registration, you will receive a confirmation email in which you must confirm the registration. This ensures that no one misuses your email address.

The legal basis is your explicit consent (Art. 31 Para. 1 revDSG in conjunction with Art. 6 Para. 6 revDSG). You can unsubscribe from the newsletter at any time — via the unsubscribe link in each newsletter email or by email to [email protected]. After unsubscribing, your email address will be deleted from the newsletter distribution list.

3.4 Contact Form and Email Contact

If you contact us via the contact form or email, your information (name, email address, message content) will be stored for processing your request. The legal basis is our legitimate interest in responding to your request (Art. 31 Para. 1 revDSG). The data will be deleted as soon as the request is conclusively clarified and no legal retention obligations are opposed.

3.5 Cookies and Tracking

Our website uses cookies. Cookies are small text files that are stored on your device and that your browser saves. They serve to make our offer more user-friendly, effective, and secure.

We use the following types of cookies:

• Technically necessary cookies: These are necessary for the operation of the website — e.g. for the shopping cart, the login area, or the language selection. Without these cookies the shop does not function. Legal basis: legitimate interest (Art. 31 para. 1 revDSG).

• Analysis cookies (Google Analytics): Our website uses Google Analytics, a web analytics service from Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses cookies that allow an analysis of the use of the website by you. The information generated by the cookie about your use of this website is usually transmitted to a server of Google in the USA and stored there. We have activated IP anonymization on this website, so your IP address is shortened by Google within member states of the European Union or in other contracting states of the agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transmitted to a server of Google in the USA and shortened there. Google will use this information to evaluate your use of the website, to compile reports on the website activities, and to provide further services related to website usage and internet usage. The IP address transmitted by your browser in the context of Google Analytics will not be merged with other data from Google. The legal basis is your consent via the cookie banner.

You can prevent the storage of cookies by adjusting your browser software settings; however, we would like to point out that in this case you may not be able to use all features of this website to their full extent. Additionally, you can prevent the collection of data generated by the cookie related to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout.

3.6 Social Media Presences

We operate profiles on the following social networks:

• Instagram: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland

• YouTube: Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland

When you visit our profiles, personal data is processed by the respective platform operators. Please note that data may also be processed outside of Switzerland or the EU. You can find the privacy notices of the respective platforms here:

• Instagram: https://help.instagram.com/519522125107875

• YouTube: https://policies.google.com/privacy

4. Disclosure of Data to Third Parties

Your personal data will generally not be disclosed to third parties, unless:

• You have explicitly consented

• The disclosure is necessary for the fulfillment of the contract (e.g. shipping service providers, payment service providers)

• There is a legal obligation

• The disclosure serves to enforce our rights, particularly for the assertion of claims

Engaged service providers (processors)

Contracts exist with all processors that ensure compliance with data protection (Art. 9 revDSG).

5. Data transmission abroad

We store and process your data primarily in Switzerland. Some of our service providers (Stripe, SumUp, Odoo S.A., Google Ireland Ltd., social networks) are based abroad. In these cases, we ensure an adequate level of data protection through appropriate guarantees (standard contractual clauses, adequacy decision of the Federal Council) (Art. 16 revDSG).

6. Data security

We take appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, loss, destruction, or against access by unauthorized persons. Our security measures are continuously improved in line with technological developments.

Data transmission on our website is encrypted via SSL/TLS (indicated by "https://" in the address bar of your browser).

7. Your Rights (Rights of the Affected)

According to the revised Swiss Data Protection Act, you have the following rights:

• Right to Information (Art. 25 revDSG): You can request information at any time about which personal data we process about you, where it comes from, for what purpose it is processed, and to whom it is disclosed.

• Right to Rectification (Art. 32 para. 1 revDSG): You can request the rectification of inaccurate or incomplete personal data.

• Right to Deletion (Art. 32 para. 2 lit. c revDSG): You can request the deletion of your personal data, provided that there are no legal retention obligations to the contrary.

• Right to Restriction of Processing (Art. 32 para. 2 lit. a revDSG): You can request the restriction of the processing of your data.

• Right to Data Portability and Transfer (Art. 28 revDSG): You have the right to receive your data in a common electronic format.

• Right to Object: You can object to the processing of your personal data if we base it on a legitimate interest.

To exercise your rights, please contact:

Coffee Space GmbH

E-mail: [email protected]

Phone: +41 31 589 69 69

We will process your request within 30 days.

8. Retention Period

We only store your personal data as long as it is necessary for the fulfillment of the respective purpose or as required by legal retention obligations (in particular Art. 958f OR: 10 years for business records and accounting documents). After these periods expire, the data will be routinely deleted.

9. Changes to this Privacy Policy

We reserve the right to adjust this privacy policy as needed to adapt it to changed legal situations or changes in our offerings. The current version is always available on our website.

10. Supervisory Authority

The competent supervisory authority for data protection in Switzerland is:

Federal Data Protection and Information Commissioner (EDÖB)

Feldeggweg 1, 3003 Bern

https://www.edoeb.admin.ch

As of: July 2026