Privacy Policy

Note: This translation is provided for information purposes. The German version is legally binding.

Last updated: August 2026

1. Data Controller

The party responsible for data processing in connection with this online shop is:

Die Fliesen Galerie Gashi
Breitestrasse 56b
5734 Reinach AG, Switzerland
Email: info@diefliesengalerie.ch
Phone: +41 76 764 14 49

2. Scope and Applicable Law

We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP). To the extent we deliver goods to customers in the European Economic Area or direct our offering to them, the European General Data Protection Regulation (GDPR) additionally applies.

3. What Data We Collect

We process the following categories of personal data:

  • Order and contract data: name, delivery and billing address, email address, phone number, ordered products, payment information (excluding full card details — these are processed directly by the payment service provider).
  • Contact data: information from inquiries made by email, phone, or contact form.
  • Usage data: IP address, date and time of access, browser type and version, operating system, referrer URL, and pages visited. This data is automatically collected when you visit the website (see sections 6–8).
  • Review data: content you voluntarily provide in product reviews (see section 9).

4. Purposes and Legal Bases of Processing

We process your data for the following purposes:

  • Processing orders and deliveries (performance of contract);
  • Responding to inquiries (performance of contract or legitimate interest);
  • Operating, securing, and improving the website (legitimate interest);
  • Advertising and reach measurement, unless you have objected or, where required, insofar as you have consented (consent or legitimate interest);
  • Fulfilling legal obligations, in particular accounting record-keeping requirements.

5. Shop System and Hosting (Shopify)

Our online shop is operated via the Shopify platform (Shopify International Limited, Victoria Buildings, 2nd Floor, 1–2 Haddington Road, Dublin 4, Ireland; parent company: Shopify Inc., Canada). When you visit the website and place orders, your data is processed on Shopify's servers; this may involve transfers to countries outside Switzerland and the EEA (including Canada and the USA). Shopify ensures an adequate level of data protection through recognized safeguards (including an adequacy decision for Canada, standard contractual clauses, and/or the Data Privacy Framework). For more information: Shopify's Privacy Policy.

6. Cookies and Local Storage

Our website uses cookies and similar technologies (e.g., localStorage). These include:

  • Technically necessary cookies: for example for the shopping cart, the checkout process, and security. Without these, the shop will not function.
  • Preference storage: your language and country selection is stored locally in your browser so that the website appears in your language on your next visit.
  • Statistics and marketing cookies: see sections 7 and 8.

You can delete or block cookies in your browser at any time; this may limit the functionality of the shop.

7. Web Analytics (Google Analytics 4)

We use Google Analytics 4, a web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google Analytics uses cookies and similar technologies to evaluate use of the website (e.g., pages visited, time spent, approximate origin). The IP address is not stored in full form. In this process, data may be transmitted to Google's servers in the USA; Google is certified under the EU-U.S. Data Privacy Framework. You can prevent data collection by Google Analytics by installing the browser add-on for opting out or by blocking cookies for our website.

8. Google Ads, Google Shopping, and Merchant Center

We use Google services (Google Ads, Google Merchant Center/Shopping) to present our products in Google Search and Google Shopping. When you click on corresponding ads or listings, Google may set cookies to measure conversions. The provider is Google Ireland Limited. For more information: Google's Privacy Policy.

9. Product Reviews (Judge.me) and Trustpilot

For product reviews, we use the service Judge.me (Judge.me Ltd., London, United Kingdom). After placing an order, you will receive an email invitation to review the products you purchased. For this purpose, your email address, name, and order data are transmitted to Judge.me. Submitting a review is voluntary; published reviews appear in the shop under the name you provided (or anonymized). You can have your review edited or deleted via Judge.me at any time. For more information: Judge.me's Privacy Policy.

We also refer to our company profile on Trustpilot (Trustpilot A/S, Copenhagen, Denmark). If you submit a review there, Trustpilot's privacy provisions apply.

10. Payment Service Providers

When making a payment, the necessary data is transmitted to the respective payment service provider (depending on the payment method chosen, e.g., credit card providers via Shopify Payments, PayPal, TWINT, or Klarna). Full card details are processed exclusively by the payment service provider and are neither stored nor accessed by us. The respective provider's privacy provisions additionally apply.

11. Shipping

To deliver your order, we pass on your name, delivery address, and — where necessary for delivery — your email address or phone number to the commissioned shipping or logistics company.

12. Newsletter

If you sign up for our newsletter, we use your email address to send you information and offers. You can unsubscribe at any time via the unsubscribe link in every email or by sending us a message.

13. External Content (CDN)

To display the website, we load individual technical resources (e.g., font icons, libraries) from content delivery networks such as cdnjs/Cloudflare and jsDelivr. For technical reasons, your IP address is transmitted to the respective CDN provider in this process.

14. Retention Period

We store personal data only for as long as necessary for the purposes stated above or as required by statutory retention obligations. We retain business and accounting records in accordance with legal requirements, generally for 10 years. Web analytics usage data is deleted in aggregated form or in accordance with the settings of the respective service.

15. Your Rights

With regard to your personal data, you have in particular the following rights:

  • To obtain information about whether and what data we process about you;
  • To have inaccurate data corrected;
  • To have your data deleted, insofar as no retention obligations conflict with this;
  • To restrict processing and to object to processing, in particular for advertising purposes;
  • To receive or have your data transferred (data portability), where applicable;
  • To withdraw any consent given, with effect for the future.

To exercise your rights, a message to info@diefliesengalerie.ch is sufficient. You also have the right to lodge a complaint with a supervisory authority — in Switzerland with the Federal Data Protection and Information Commissioner (FDPIC), and in the EEA with the data protection authority responsible for you.

16. Data Security

Our website is delivered via an encrypted connection (TLS/HTTPS). We take appropriate technical and organizational measures to protect your data against loss, misuse, and unauthorized access.

17. Changes to This Privacy Policy

We may amend this privacy policy as needed, for example in the event of changes to the services used or to the legal situation. The version published on this page at any given time shall apply.