Data protection

As of: September 8, 2026

1. General

The protection of your personal data is important to us. In this privacy policy, we inform you about which personal data we process when you visit www.avelaro.ch, place an order, and use our services, for what purposes this is done, and what rights you are entitled to.

Personal data is any information relating to an identified or identifiable natural person.

Your data is processed in accordance with the Swiss Data Protection Act. To the extent applicable in individual cases, we also take into account the provisions of the General Data Protection Regulation of the European Union.

2. Controller

The entity responsible for data processing is:

Mathis Ventures
Benjamin Miles Mathis
Weinbergweg 14
5303 Würenlingen
Switzerland

E-mail: info@avelaro.ch
Web: www.avelaro.ch

3. Which data we process

Depending on how you use our online shop, we may process, in particular, the following data:

• First and last name
• Billing and delivery address
• E-mail address and telephone number
• Customer account and login data
• Order, product, and transaction information
• Details regarding the selected payment method and payment status
• Shipping, delivery, and tracking data
• Communication with our customer service
• Return, complaint, and refund information
• IP address, device, and browser information
• Usage data of our website
• Cookie and consent settings
• Details from reviews, forms, or newsletter subscriptions
• Information for the detection and prevention of fraud and abuse

Full credit card or payment data are generally processed directly by the payment service providers used and are not stored by Avelaro.

4. Origin of the data

We receive personal data in particular:

• directly from you, for example when placing an order, contacting us, or subscribing to the newsletter,
• automatically when using our website,
• from payment, shipping, and logistics service providers,
• from Shopify and the service providers integrated into our shop,
• from advertising, analytics, and social media platforms, insofar as their services are activated and appropriate consent or other legal basis exists.

5. Purposes of data processing

We process personal data in particular for the following purposes:

• Operation and provision of our online shop
• Processing and handling of orders
• Payment processing and verification of payment status
• Shipping, delivery, and tracking
• Management of customer accounts
• Processing of inquiries, complaints, and refunds
• Communication regarding orders and services
• Fulfillment of legal retention and proof obligations
• Ensuring the security and functionality of our website
• Detection and prevention of fraud, abuse, and security incidents
• Analysis and improvement of our offerings
• Personalization of content and advertising, if permitted
• Sending newsletters and marketing communications with your consent
• Enforcement or defense of legal claims

6. Legal basis

Insofar as the General Data Protection Regulation is applicable, we base the processing in particular on:

• the performance of a contract or pre-contractual measures,
• the fulfillment of legal obligations,
• our legitimate interests in the secure, economical, and customer-friendly operation of our online shop,
• your consent, insofar as such is required.

Given consent can be withdrawn at any time with effect for the future. The legality of the processing carried out until the withdrawal remains unaffected.

7. Orders and customer account

When you place an order or create a customer account, we process the data provided by you to perform and manage the contractual relationship.

This includes, in particular, order verification, payment processing, shipment preparation, delivery, customer communication, and the handling of any complaints or refunds.

You are obligated to provide complete and correct information. Incorrect or incomplete information may lead to delays or the non-deliverability of an order.

8. Shopify

Our online shop is operated via the e-commerce platform Shopify. Depending on the responsible contracting entity, the provider is in particular Shopify International Limited or an affiliated company of the Shopify group of companies.

Shopify provides the technical infrastructure for our online shop and processes data necessary for the operation of the website, order processing, security, and other shop functions.

In this context, personal data may also be processed in countries outside of Switzerland. Further information on data processing by Shopify can be found in Shopify's privacy policy.

9. Payment processing

For payment processing, we transmit the necessary data to the payment service provider you have selected. This may include, in particular, your name, billing address, order value, currency, transaction number, and details regarding the payment status.

The payment service providers process your data under their own responsibility and in accordance with their respective privacy policies. Which payment methods are available is shown to you during checkout.

Avelaro generally does not receive full credit card information, but only the payment and status information required for order processing.

10. Shipping and tracking

To fulfill your order, we transmit the necessary data to shipping, logistics, and fulfillment service providers. This may include, in particular, the following details:

• Name and delivery address
• E-mail address and telephone number
• Order and package information
• Tracking number and delivery status

We use 17TRACK for shipment tracking. If you access the tracking or if we link your shipment data to this service, necessary order, shipping, and technical usage data may be processed by 17TRACK.

As our shipping and logistics partners are partly active internationally, data processing may take place outside of Switzerland.

11. Contacting us and customer service

If you contact us via e-mail, contact form, or any other method, we process your information to answer your inquiry and handle your request.

Correspondence may be stored for as long as it is necessary for processing, documentation, quality assurance, or the enforcement of legal claims.

12. Newsletter and marketing communications

If you subscribe to our newsletter, we process your e-mail address and, if applicable, other voluntary information to send you news, offers, and product information.

Registration is voluntary. You can unsubscribe from the newsletter at any time via the unsubscribe link in the respective message or by sending an e-mail to info@avelaro.ch.

Transaction-related communications regarding orders, payments, shipping, or security-relevant processes may be sent independently of a newsletter subscription.

13. Cookies and similar technologies

Our website uses cookies and similar technologies. These are small files or technical identifiers that can be stored on your device or read when using our website.

We use in particular:

• necessary cookies, which are required for the operation of the shop, the shopping cart, checkout, security, and your privacy settings,
• functional cookies, which enable additional features and more convenient use,
• analytics cookies, which allow us to evaluate and improve the use of our shop,
• marketing cookies, which can measure the effectiveness of advertising and display interest-based content.

Non-necessary cookies and comparable technologies are only used according to your selection in the cookie banner, insofar as consent is required.

You can change your selection at any time via the privacy settings or the cookie banner. Additionally, cookies can be restricted or deleted via your browser settings. This may impair individual functions of the shop.

14. Analytics, advertising, and social media

Insofar as activated in our shop and permitted by you, we may use analytics and advertising services, in particular services from Google and Meta.

These services may process information about your use of our website, for example:

• IP address
• Device and browser information
• Visited pages and viewed products
• Interactions with our shop
• Purchases and other events
• Cookie and advertising identifiers

The data can be used to evaluate the use of our shop, measure the reach and effectiveness of advertisements, and show you more relevant advertising.

The respective providers may also process data outside of Switzerland and in some cases combine it with existing account information. The use of non-necessary analytics and marketing technologies occurs, insofar as required, only with your consent.

15. Reviews and user-generated content

If you submit a product review, image, comment, or other content, we process the associated information for the review and publication of the contribution.

Depending on the review function, your specified name, the review, and the submitted content may be publicly visible. Please do not publish any confidential information or personal data of third parties.

We reserve the right not to publish or to remove illegal, offensive, misleading, or off-topic content.

16. Recipients of personal data

We only pass on personal data if it is necessary for the provision of our services, for the fulfillment of a contract, to safeguard legitimate interests, based on your consent, or based on a legal obligation.

Recipients may include, in particular:

• Shopify and providers of technical shop services
• Payment service providers and financial institutions
• Suppliers, fulfillment, shipping, and logistics partners
• 17TRACK and other tracking services
• IT, hosting, security, and support service providers
• Newsletter, analytics, advertising, and communication providers
• Review and customer service providers
• Consultants, trustees, and legal representatives
• Authorities and courts, provided there is a legal obligation

Our service providers generally only receive the data that they need for the respective task.

17. Data processing abroad

Individual service providers, suppliers, or business partners may be located outside of Switzerland or process data on foreign servers.

If the recipient country, from a data protection perspective, is not in a country with an adequate level of data protection, we take appropriate protective measures—where necessary. This may include, in particular, recognized standard contractual clauses, contractual data protection guarantees, or other legally provided protection mechanisms.

In legally permissible exceptional cases, a transfer may also take place if it is necessary for the fulfillment of a contract, you have explicitly consented, or another legal exception applies.

18. Retention period

We only store personal data for as long as it is necessary for the respective processing purpose or as required by legal retention obligations.

Order, contract, accounting, and transaction data can generally be retained for up to ten years due to legal obligations. Other data will be deleted or anonymized as soon as it is no longer required for the purpose of its processing and no legitimate reasons for retention exist.

19. Data security

We take appropriate technical and organizational measures to protect personal data against loss, misuse, unauthorized access, alteration, or disclosure.

Depending on the situation, this includes, in particular, encrypted data transmission, access restrictions, security audits, and the use of carefully selected service providers.

Despite these measures, a completely risk-free data transmission or storage cannot be guaranteed.

20. Automated checks

To detect and prevent fraudulent or abusive orders, certain transactions may be automatically checked for security and risk features.

If such a check reveals irregularities, an order may additionally be manually checked. We may request further information or refuse or cancel an order within the legally permissible framework.

Insofar as an exclusively automated individual decision has significant legal effects on you and the legal requirements are met, you are entitled to the legally provided rights.

21. Your rights

Within the framework of applicable data protection law, you may be entitled to the following rights in particular:

• Information about the personal data we process
• Correction of incorrect or incomplete data
• Deletion of personal data
• Restriction of or objection to certain processing
• Release or transfer of certain data in a common electronic format
• Withdrawal of given consent with effect for the future
• Review of specific automated individual decisions

These rights may be subject to legal restrictions. In particular, statutory retention obligations or overriding legitimate interests may prevent immediate deletion.

To exercise your rights, please contact us at info@avelaro.ch. To protect your data, we may require appropriate proof of identity.

22. Complaints

If you believe that your personal data is not being processed lawfully, you can contact us directly.

You also have the option to submit a report or complaint to the Federal Data Protection and Information Commissioner (FDPIC). Insofar as the General Data Protection Regulation (GDPR) is applicable, you can also contact the competent European data protection supervisory authority.

23. Children's data

Our offering is not specifically aimed at children. Individuals who, according to the law applicable to them, cannot act independently and legally effectively may only transmit personal data with the consent of their legal representative.

If we become aware of such data without the required consent, we may delete it.

24. External links

Our website may contain links to third-party websites or services. The respective providers are responsible for their content, security measures, and data processing. Please note the privacy policies of the corresponding third-party providers.

25. Changes to this privacy policy

We may adapt this privacy policy if our data processing, the services used, or legal requirements change.

The version published on www.avelaro.ch applies. The date indicated above shows the status of the last update.