Privacy Policy

Data controller

What data we collect

Data you give us

• identity: surname, first name;
• contact details: e-mail address, telephone number, postal address;
• professional information: diploma, trading licence or proof of activity, for the approval of a professional account;
• the content of your messages when you contact us.

Data collected automatically

• IP address, browser type, operating system;
• pages viewed, time spent, referring source;
• cookie identifiers.

Payment data

Your card details are processed directly by our payment provider, Planet Payment Switzerland GmbH. They do not pass through our servers and we never have access to them.

Why we use it

• to process and deliver your orders;
• to manage your customer account and verify your professional status;
• to send you order confirmations and dispatch tracking;
• to answer your enquiries;
• to send you our newsletter, if you have consented to it;
• to improve the site and measure its audience;
• to comply with our legal and accounting obligations.

Legal basis

Processing is based on the performance of the sales contract, on your consent (newsletter, non-essential cookies), on our legitimate interests (site security, fraud prevention) and on our legal obligations (retention of accounting records).

Who we share it with

We neither sell nor rent your data. It is passed on only:

• to Swiss Post, to deliver your parcel;
• to Planet Payment Switzerland GmbH, our payment provider, to collect payment;
• to Google Ireland Limited, for audience measurement (Google Analytics 4);
• to Akamai Technologies (Linode), our hosting provider, and to our technical service providers;
• to our accountants, for bookkeeping;
• to the authorities, where the law requires it.

Transfers abroad

Our data is hosted on the infrastructure of Akamai Technologies (Linode), in a data centre located in Frankfurt am Main, Germany.

Audience measurement data is processed by Google Ireland Limited, in Ireland, with processing potentially taking place in the United States by Google LLC.

Germany and Ireland appear on the list of states whose legislation guarantees an adequate level of protection, drawn up by the Swiss Federal Council (annex 1 OPDo, the Swiss Data Protection Ordinance). For processing that may take place in the United States, the transfer is covered by standard contractual clauses. You can obtain a copy of these safeguards by writing to info@esthoria.ch.

How long we keep it

Cookies

We use:

• technical cookies, necessary for the basket and for logging in to work. These cannot be switched off;
• audience measurement cookies (Google Analytics 4), to understand how the site is used;
• advertising cookies, where applicable, to measure how effective our campaigns are.

Non-essential cookies are only set with your consent. You can change your choice at any time through the cookie banner or your browser settings.

Your rights

At any time you may:

• access the data we hold about you;
• have it corrected or erased;
• object to its processing or ask for the processing to be restricted;
• withdraw your consent;
• ask for your data to be ported;
• lodge a complaint with the Federal Data Protection and Information Commissioner (PFPDT/FDPIC), Feldeggweg 1, 3003 Bern.

To exercise your rights: info@esthoria.ch. We reply within 30 days.

Security

The site is protected by TLS encryption. Access to the data is limited to the people who need it to do their job.

Minors

This site is intended for adults. We do not knowingly collect data relating to minors.

Changes

This policy may be updated. The date at the top of the page shows the latest version.