GDPR Privacy Policy
Effective Date: February 2026
This Privacy Policy describes how Mama’s Shop processes personal data in accordance with the General Data Protection Regulation (EU GDPR) and the Swiss Federal Act on Data Protection (FADP).
1. Data Controller
The party responsible for data processing is Mama’s Shop, Zurich, Switzerland. If you have questions regarding data protection, please contact us directly.
2. Data Collected
We collect and process the following types of data:
- Contact Information: Name, email address, phone number, shipping address.
- Order Data: Information regarding purchased products and payment details.
- Usage Data: IP address, browser type, access times, and pages visited.
3. Purpose of Processing
Your data is processed for the following purposes:
- Processing of orders and payments.
- Provision of customer service and support.
- Technical analysis and improvement of website security.
- Marketing and personalized offers (only where explicit consent is given).
4. Legal Basis
Processing is carried out based on Art. 6 GDPR and relevant Swiss law (Performance of a contract, Consent, or Legitimate Interest).
5. Retention & Third Parties
Personal data is retained only as long as necessary for the respective purposes or as required by law.
Data is shared only with service providers necessary for contract fulfillment (e.g., payment processors, shipping carriers). Transfers outside Switzerland or the EU occur only with an adequate level of data protection.
6. Your Rights
You have the right to access, rectification, erasure, restriction of processing, and data portability. You may revoke your consent to data processing at any time.