DISCLAIMER

Privacy Policy

Effective date: 26 August 2025
Scope: This policy applies to the processing of personal data by S&J Handel Shi (“we”/“us”) via our website and related online communication channels.

1. Controller & Contact

S&J Handel Shi
Ritterstrasse 181A, 8200 Schaffhausen, Switzerland
Tel.: +41 76 419 98 66 · E-mail: info@buddha-deko.ch
Website: https://www.buddha-deko.ch

2. Applicable Law & Principles

We process personal data primarily under the revised Swiss Federal Act on Data Protection (revFADP) and, where applicable, under the GDPR. We adhere to the principles of lawfulness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity/confidentiality, and accountability.

3. Categories of Data

• Identification & contact: name, salutation, postal address, e-mail, telephone number

• Orders & fulfilment: products, amounts, payment and shipping data, invoicing information, returns

• Technical & logs: IP address, device/browser information, timestamps/page views, referrer

• Communication: content from e-mails/forms/messages and attached documents

• Optional: reviews/feedback (voluntary), participation in promotions

4. Purposes & Legal Bases

• Contract & performance: order processing, delivery, returns, invoicing, customer service

• Communication: responding to inquiries, service and legal requests

• Operation & security: website operation, error diagnostics, abuse/fraud prevention (necessary logs/cookies)

• Legal obligations & compliance: accounting/tax, regulatory requirements, assertion/defence of claims

• Legitimate interests: e.g., service improvement, IT security—provided your interests/rights do not prevail

• Consent: for non-essential activities (e.g., marketing communications); may be withdrawn at any time with future effect.

5. Recipients & Disclosures

Data are shared only where necessary and lawful, with:

• Fulfilment service providers: logistics/shipping, IT hosting/operations, support/ticketing systems, review or e-mail services

• Payment & financial institutions: payment/refund processing, dispute resolution, fraud prevention

• Professional advisers & legal bodies: lawyers, auditors, mediation/arbitration bodies, courts/authorities

• Supervisory/law-enforcement authorities: where required by law or upon lawful request

Strict restriction (media/public):
We do not disclose identifiable personal data to the media or the public. For reporting purposes we provide anonymised or pseudonymised materials only (purpose limitation, data minimisation). Any exception requires a clear legal basis and a documented necessity assessment.

6. International Data Transfers

Principle: processing within Switzerland.
If, by exception, a transfer abroad becomes necessary, it will take place only after legal review and with appropriate safeguards (e.g., adequacy decision, contractual safeguards) and under strict data minimisation. Upon request we will inform you about affected recipient categories and safeguards.

7. Cookies & Similar Technologies

• Necessary cookies: for basic functions/security; cannot be disabled.

• Preference/statistics/marketing cookies (if used): activated only with your consent; you may withdraw consent at any time via the cookie banner or browser settings.
  Disabling non-essential cookies may restrict certain functions, but core functionality remains available.

8. Retention Period

We retain personal data only as long as necessary:

• Contract/invoice records: per statutory retention periods

• Service/communication: until completion of processing plus the shortest necessary follow-up period

• Security/log data: for the operationally required minimum period, then deletion/anonymisation
  Once the purpose ceases or periods expire, we delete or anonymise data unless legal duties require otherwise.

9. Security

We implement technical and organisational measures (access controls, encrypted transmission, need-to-know, backups/recovery, logging/monitoring) to protect data against loss, misuse, and unauthorised access.

10. Your Rights

Subject to legal requirements, you have in particular the rights to access, rectification, erasure, restriction, objection (especially to direct marketing/legitimate-interest processing), data portability, and withdrawal of consent given.
To exercise these rights, please contact us using the details in Section 1. In Switzerland you may also contact the Federal Data Protection and Information Commissioner (FDPIC); EU/EEA data subjects may lodge a complaint with their competent supervisory authority.

11. Incident Notification

If a data protection incident occurs that is likely to result in a high risk to your rights and freedoms, we will inform you without undue delay and—where required—the competent authority, and we will take remedial measures.

12. Minors

Our services target adults. We do not knowingly process data of minors; if we become aware of such processing, we will delete the data or obtain consent from the legal guardian.

13. Third-Party Links

For content and data processing on linked third-party sites, the respective operators are solely responsible; please refer to their privacy notices.

14. Automated Decision-Making

We do not make decisions based solely on automated processing within the meaning of Art. 21 revFADP and Art. 22 GDPR; high-risk profiling does not take place.

15. Changes to this Policy

We may update this policy and will publish the current version with date. In the event of material changes (e.g., new purposes/recipient categories) we will inform you appropriately.

Last updated: 26 August 2025
Contact for privacy inquiries: info@buddha-deko.ch