Privacy

Last updated: October 2026

Short version: we keep the data needed to deliver your order and answer your email. To measure whether our advertising on Facebook and Instagram works, we use the Meta pixel. On nachtseide.ch we load it only for visits from Switzerland, and you can switch it off with one click (section 6). No Google Analytics, no selling of data.

1. Applicable law

We are based in Switzerland. Processing is therefore governed primarily by the revised Federal Act on Data Protection (FADP, in force since 1 September 2023) and its ordinance. The EU GDPR applies in addition where processing falls within its scope. Both apply alongside each other.

2. Controller

Nachtseide, P. Ringler, Reuchenettestrasse 106, 2504 Biel/Bienne, Switzerland – hello@nachtseide.ch.

3. What we collect

When you order: name, delivery and billing address, email address, optional phone number, what you bought and how you paid. When you email us: what you write. When you subscribe: your email address. When you visit: our host records standard server logs (IP address, browser, page requested, timestamp) for security and operation. For visits from Switzerland, the Meta pixel data comes on top (section 6).

4. Purposes and legal bases

To perform the contract when you order, meaning processing, shipping and payment (Art. 6(1)(b) GDPR). With your consent for the newsletter, revocable at any time (lit. a). To meet legal obligations, in particular Swiss bookkeeping duties (lit. c). On legitimate interests for security and fraud prevention (lit. f). To measure and improve our advertising on Facebook and Instagram (Meta pixel, section 6): we inform you about it on this page and you can refuse at any time (Art. 45c Telecommunications Act). The FADP requires no separate legal basis as long as processing is lawful, proportionate, transparent and tied to its purpose, which is the case here.

5. Who receives your data

Only those who need it so your order arrives:

• Shopify International Ltd. (Ireland) and Shopify Inc. (Canada) run the cart, checkout and payment. Card details go straight to Shopify Payments; we never see or store them.
• Vercel Inc. (USA) hosts this website and produces the server logs described above.
• Swiss Post for delivery: name and address only.
• FormSubmit forwards newsletter sign-ups to our mailbox if you subscribe.
• Infomaniak (Switzerland) hosts our mailbox; incoming messages are also forwarded to a Google Mail account from which we reply.
• Our bookkeeping and the tax authorities, as far as the law requires.

For our advertising on Facebook and Instagram, also Meta Platforms Ireland Ltd. (Ireland), see section 6.

We do not sell, rent or trade personal data. Ever.

6. Meta pixel (advertising on Facebook and Instagram)

On nachtseide.ch we use the Meta pixel from Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, D04 X2K5, Ireland. It shows us whether our ads on Facebook and Instagram lead to visits and orders, and it lets us show ads again to people who have visited our site.

We load the pixel only for visits from Switzerland (based on the country of your IP address), and not if your browser sends the Global Privacy Control signal or you have switched the pixel off. When it is active, Meta receives: which pages you open, which products you view or add to the cart (with variant and price), your IP address, details about your browser and device, and a random identifier in the _fbp cookie. If you arrive through an ad from Meta, a click identifier in the _fbc cookie is added. If you are logged in to Facebook or Instagram in the same browser, Meta can link the visit to your account.

In the checkout on shop.nachtseide.ch, Shopify reports the steps of your purchase to Meta through the "Facebook & Instagram" app (checkout started, payment details entered, purchase with order value and products), from the browser and directly from Shopify's servers. So that Meta can attribute a purchase to an ad, contact details such as email address, phone number, name and address may also go to Meta in encrypted (hashed) form.

We are jointly responsible with Meta for the collection and the transmission to Meta (agreement with Meta). Meta alone is responsible for everything it does with the data afterwards, see Meta's privacy policy.

Switching it off: with the switch below you turn the pixel off on nachtseide.ch for this browser. Your choice stays stored in your browser, and the _fbp and _fbc cookies are deleted. This setting does not apply to the checkout. There and everywhere else, you can set in Meta's Accounts Center that Meta does not link your activity on other websites to your account. You can also write to us.

What we do not do: no Google Analytics, no other advertising or tracking services, no data brokers. Our fonts are downloaded once at build time and served from our own domain, so nothing goes to Google when a page loads. In the checkout on shop.nachtseide.ch, Shopify also sets its own cookies, including for Shopify's internal statistics; that is outside our control. If another service is added, we will change this page first.

7. Cookies and local storage

Your cart is stored locally in your browser (local storage) and is not transmitted to us, and neither is your choice on the Meta pixel switch. For visits from Switzerland, the Meta pixel sets the _fbp cookie on nachtseide.ch and, if you arrive through an ad from Meta, the _fbc cookie (90 days each). At checkout, Shopify sets technically necessary cookies, cookies for its own statistics and the Meta pixel cookies. You can disable cookies and local storage in your browser; using the shop may then be limited.

8. Disclosure abroad (Art. 16-17 FADP)

Shopify, Vercel, FormSubmit and Meta process data in the EEA, Canada and the USA. Transfers rely on the EU Standard Contractual Clauses with the adaptations recognised for Switzerland, and on the Swiss-U.S. Data Privacy Framework where the recipient is certified. Canada is covered by an adequacy decision. You can request a copy of these safeguards at any time.

9. Retention

Order and invoice records: ten years under Swiss commercial law. Newsletter subscription: until you unsubscribe. Emails to us: as long as needed to resolve the matter, then deleted. Server logs: a short rolling period at the host, for security reasons. Meta pixel cookies: 90 days, unless you delete them earlier. How long Meta keeps the data is governed by Meta's privacy policy.

10. Your rights under the FADP

Access (Art. 25): whether and which data we process about you. Rectification (Art. 32): have inaccurate data corrected. Erasure: have data deleted unless a retention duty applies. Objection: object to a specific processing operation. Data release (Art. 28): receive your data in a common electronic format. Withdrawal of consent: at any time, with effect for the future. Write to the address above. We may ask you to identify yourself first.

11. Your rights under the GDPR

Where the GDPR applies, you additionally have the rights of access, rectification, erasure, restriction, data portability and objection under Art. 15–21, as well as the right to lodge a complaint with a supervisory authority.

12. Supervisory authority

Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, Switzerland. The civil courts are also open to you.

13. Security

The website is served exclusively over encrypted HTTPS. Payment runs through Shopify's encrypted infrastructure. Access to order data is limited to the people who need it to fulfil orders.

14. Changes and language versions

We may amend this privacy statement at any time. The version published on nachtseide.ch applies. In the event of discrepancies between language versions, the German version prevails.