Privacy policy – Warmeholz

Last updated: October 2026

Who we are

Our website address is: https://warmeholz.ch/. This website and online shop are operated by:

Warmeholz
9 route du Beauregard
1180 Rolle, Suisse
E-mail: info@warmeholz.ch
Phone: +4175731714

We are responsible for processing your personal data. We process it in accordance with the Swiss Federal Act on Data Protection (FADP) and, where applicable (customers living in the European Union), the General Data Protection Regulation (GDPR).

What personal data we collect and why

Orders and customer account

When you place an order, we collect the data needed to process it: name, delivery and billing address, e-mail address, phone number, products ordered, amount and payment method. This data is used to perform the contract (preparation, delivery, invoicing, after-sales service) and to meet our legal obligations. If you create an account, we also store your login details and addresses to make future orders and order tracking easier.

Payment

Online payments are processed by specialised payment providers. We do not receive or store any card details; we only receive the payment confirmation.

Delivery and order tracking

To deliver your order, we pass only the strictly necessary data (name, address, phone number to arrange the appointment) to the carrier or our delivery service. On the order tracking page you can check the status of your order with your order number and e-mail address.

Contact form

If you write to us using the contact form, we collect the data you enter (name, e-mail and, if provided, phone, order number and message) solely to answer your request. These messages are kept for no more than 12 months and then deleted automatically. To prevent abuse, an encrypted (unreadable) fingerprint of your IP address is kept for one hour.

If you subscribe to our newsletter, we use your e-mail address only to send you our news (season, prices, delivery dates). Subscription is confirmed in two steps (confirmation e-mail) and you can unsubscribe at any time.

Comments

When visitors leave comments on the site, we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymised string created from your e-mail address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public next to your comment.

Media

If you upload images to the website, avoid uploading images with embedded location data (EXIF GPS). Visitors to the website can download and extract any location data from images on the website.

Cookies and browser storage

Our website only uses technical cookies that are necessary for it to work:

Cart and order: shop cookies (WooCommerce) remember your cart and session for at most 48 hours.
Language: the “ps_lang” cookie remembers the language you chose for one year.
Login: if you have an account and log in, we set a temporary cookie to check that your browser accepts cookies (deleted when you close the browser), then login cookies lasting two days, or two weeks if you select “Remember me”. They are removed when you log out.
Comments: if you leave a comment, you may choose to save your name, e-mail and website in cookies for one year so that you do not have to enter them again.

Your wishlist and some display preferences are stored only in your browser (local storage); they are not sent to us.

Embedded content from other websites

Pages on this site may include embedded content (e.g. videos or maps). Embedded content from other websites behaves in the exact same way as if the visitor had visited the other website. These websites may collect data about you, use cookies, embed additional third-party tracking and monitor your interaction with that embedded content.

The fonts of our website are hosted on our own server: no data is sent to an external font service when you visit.

Statistics and analytics

We do not use analytics tools or advertising cookies. If this changes, we will update this policy and ask for your consent where required by law.

Who we share your data with

Your data is never sold. We only share it when necessary:

with payment providers, to process the payment of your order;
with carriers and delivery partners, to deliver your order;
with our web hosting provider, which stores the website and its data on its servers;
with authorities, where we are legally required to do so.

Some of these providers may be located in the European Union; these countries are recognised by Switzerland as providing an adequate level of data protection. If you request a password reset, your IP address will be included in the reset e-mail.

How long we keep your data

Orders and invoices: 10 years, in accordance with the legal obligations to keep accounting records.
Customer account: until you ask us to delete it. You can see and edit your information at any time in your account.
Contact form messages: no more than 12 months.
Newsletter: until you unsubscribe.
Comments: the comment and its metadata are kept indefinitely, so that follow-up comments can be recognised and approved automatically.

Your rights over your data

You can at any time ask to access the personal data we hold about you, have it corrected or deleted, receive a copy in a common format, object to its processing or withdraw your consent. This does not include data we must keep for administrative, legal or security purposes. Simply write to us at info@warmeholz.ch.

You can also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC, www.edoeb.admin.ch) or, if you live in the European Union, with the data protection authority of your country.

How we protect your data

We use technical and organisational security measures, in particular HTTPS / SSL encryption on every page of https://warmeholz.ch/, to protect your personal data during transmission and storage. Access to the data is restricted to the people who need it to process your orders and requests.

Data breach procedures

In the event of a security breach or data leak that poses a risk to your rights, we will inform the competent authorities and the people concerned in accordance with the applicable law.