Privacy policy
1. Controller
The controller for data processing on this website is: Primos del Patrón GmbH, Gärbigasse 17, 6215 Beromünster, Switzerland. For privacy matters, reach us at info@primos-del-patron.ch.
2. Legal bases
We process personal data where it is necessary to perform a contract with you (orders, account), where you have given your consent (newsletter, contact form, analytics cookies), where the law requires it (accounting, age verification), or where we have an overriding legitimate interest (operation, security, abuse prevention). For visitors from the EEA these bases correspond to Art. 6(1)(a), (b), (c) and (f) GDPR.
3. What data we process
Account & profile: your email address and the details you voluntarily store in your account (name, address, phone, company). Orders: order, delivery and payment details. We never see card data; payment runs directly through Stripe. Reviews: the display name you choose, stars and comment; publicly visible. Contact & newsletter: your message or your email address (newsletter only after double-opt-in confirmation). Technical: visiting the site generates IP address and access data for server operation and security. Usage: with your consent we collect anonymous statistics on the pages viewed, the referrer, the approximate region, the device type and the browser.
4. Purposes of processing
We process your data to handle orders and the member account, answer enquiries, send the newsletter and measure audience anonymously (both only with your consent), and to operate and secure the website (abuse and bot protection, age verification). We run no ad tracking and sell no data. With your consent we also measure the reach of our pages (Google Analytics) in order to improve our content and our range.
5. Account & invitation
The members area is invitation-based. When you redeem an invite code we store the code, the moment it was redeemed and the account it opened; that is how each code is issued only once. Your account holds your email address and either a password or your Google sign-in; credentials are managed by Firebase Authentication and we never see your password. Profile details (name, address, phone, company) are yours to add voluntarily so that ordering is quicker. Your cart is stored with your account so that it looks the same on every device.
6. Orders & payment
When you order we process your contact and delivery details, the items ordered, amounts, payment status and order history. Payment is handled by Stripe: you enter card or TWINT details directly with Stripe. We only receive the payment confirmation, the payment method, the last digits of the card and a transaction reference; we never see or store full card data. Stripe additionally processes data for fraud detection and to meet its own legal obligations as a payment service provider. Order and invoice data are subject to the statutory retention period.
7. Contact form & newsletter
Contact form: we process your name, email address, subject and message, together with your acceptance of this privacy policy and its timestamp, the latter as proof of consent. These details are used solely to answer your enquiry. Newsletter: sign-up runs as a double opt-in. Your address stays unconfirmed until you click the link in our confirmation email; the sign-up and confirmation times are logged. Every issue carries an unsubscribe link that takes effect immediately; a withdrawal applies going forward. All system and newsletter emails are delivered through the Firebase 'Trigger Email' extension and Infomaniak's SMTP service (Switzerland).
8. Age verification
We may only supply tobacco products to people aged 18 and over (Swiss Tobacco Products Act, TabPG). On your first visit you confirm your age yourself; that confirmation is stored for 30 days in your browser only and is never transmitted to us. For orders we reserve the right to verify age, both when the order is placed and when the parcel is handed over.
9. Reviews
If you publish a review, the display name you choose, the rating, the text and the date are visible to every visitor and may be picked up by search engines. You can delete your own reviews at any time; deleting your account removes them as well.
10. Processors & third parties
Google Firebase (Google Ireland Ltd. / Google LLC): hosting, database, authentication, file storage and the server function behind this site. Google Analytics (Google Ireland Ltd. / Google LLC): anonymous audience measurement, only after your consent in the cookie banner. Stripe Payments Europe Ltd. / Stripe Inc.: payment processing for card and TWINT. Cloudflare Inc. (Turnstile): bot protection on our forms; this involves your IP address and technical characteristics of your browser. Turnstile sets no advertising cookies and builds no cross-device profile. Google Analytics 4 via Firebase (Google Ireland Ltd.): anonymous reach measurement, only after you consent. Email delivery: the Firebase 'Trigger Email' extension hands order, system and newsletter mail to the SMTP service of Infomaniak Network SA (Geneva), which sends it; the servers are located in Switzerland. Fonts, images and scripts are served from our own domain; there is no connection to Google Fonts or a third-party CDN. All providers are contractually bound as processors and handle data only on our instructions.
11. Disclosure abroad
Our data sits primarily in Switzerland and the EEA; the database and the server function behind this site run in the europe-west6 region (Zurich). With Google, Stripe and Cloudflare, processing in the United States or other countries cannot be excluded. We base such disclosures on the European Commission's standard contractual clauses with Swiss amendments and, where the providers are certified, on the Swiss-U.S. and EU-U.S. Data Privacy Framework.
12. Hosting & server logs
The site is served through Firebase Hosting; the server logic runs as a single cloud function in europe-west6 (Zurich). For technical reasons the infrastructure logs your IP address, the time, the URL requested, the referrer, the status code and your browser identification. These logs serve operation, troubleshooting and attack prevention, are never merged with your account and are deleted automatically after a short period. To prevent abuse we also limit the number of requests per IP address.
14. Analytics with Google Analytics
Only if you choose 'Accept all' in the cookie banner do we load Google Analytics 4 (via Firebase, Google Ireland Ltd.). It measures page views with page title, URL, referrer and path, plus approximate region, device type and browser; the result is an anonymous usage statistic. Google Analytics 4 uses your IP address only to derive a coarse location and does not store it. We use no advertising features, no remarketing, and we pass these statistics to no one. Without your consent the analytics code is never even loaded. You can change your choice at any time under 'Cookie settings' in the footer; a withdrawal takes effect immediately and going forward.
15. Data security
All connections are TLS-encrypted and backed by a strict content security policy. Public visitors never write to our database directly: forms go through validated server endpoints, and the database rules are closed by default. Access to account, order and message data is limited to explicitly authorised people. Passwords are held, hashed, by Firebase Authentication alone, payment data by Stripe alone.
16. Retention
Account and profile data stay stored until you delete your account. Order and accounting data are kept for 10 years under the statutory retention duty (Art. 958f CO). Newsletter addresses are kept until you unsubscribe, contact enquiries until they are settled and at most two years beyond that. Invite codes stay stored as long as the account they opened exists. Server logs are deleted automatically after a short period. Analytics data in Google Analytics is deleted automatically according to the retention period set there (14 months by default).
17. Your rights
You have the right to access, rectification, deletion and data portability, and the right to withdraw consent you have given; a withdrawal applies going forward. You can delete your account, profile, cart and reviews yourself at any time in the account area; order data remain because of the statutory retention duty. For anything else an email to info@primos-del-patron.ch is enough; we may verify your identity first. If you believe we process your data unlawfully, you can contact the Federal Data Protection and Information Commissioner (FDPIC, Bern) or, in the EEA, your competent supervisory authority.
18. No automated individual decisions
We make no automated individual decisions with legal effect and do no profiling for advertising purposes. The only automated checks are the bot verification on our forms (Cloudflare Turnstile) and the fraud screening run by our payment provider. If a payment is declined that way, get in touch; a human will look at it.
19. Changes to this policy
We adapt this privacy policy when our website, our service providers or the law change. The version published on this page is the one that applies; the date of the last change is shown at the foot of the page.
Last updated: August 2026
Terms & conditions