1. Controller and contact
The controller is Dedal Services AG, UID CHE-221.348.585, Steinwiesenstrasse 3, CH-8952 Schlieren, Switzerland. Dedalshop is the brand of the online store; privacy rights (access, rectification, complaint, etc.) are exercised with the company. To exercise your rights or ask privacy questions, write to the addresses published on the site (e.g. info@dedalshop.ch) with a clear subject and a secure reply address.
2. Categories of data
Depending on your interaction we may process: identity and contact data; billing and shipping details; account credentials; order content; support messages; technical data (IP address, logs, browser type, device, pages viewed); data collected via cookies and similar technologies as described in the Cookie policy.
- Registration and customer profile data
- Transactional data and order history
- Browsing and security-related data
- Information you voluntarily send to support
3. Purposes and legal bases
We process data to perform purchase contracts (orders, payments, delivery, returns), operate your account, respond to requests and meet legal duties (tax, accounting, cooperation with authorities). With your consent: newsletters or promotional messages where offered, and non-essential cookies. For site security, fraud prevention and service improvement we may also rely on legitimate interests, balanced against your rights.
4. Recipients and processors
We use processors acting on our instructions (hosting, e-mail infrastructure, payment providers such as Stripe, analytics if enabled, logistics partners). They are bound by contract and, where required, data-processing agreements. We do not sell your personal data.
5. International transfers
If data is processed outside Switzerland or the EEA, we use appropriate safeguards (adequacy decisions, standard contractual clauses or equivalent measures under applicable law), consistent with group legal practice.
6. Retention
We keep data as long as needed for the purposes above and for statutory retention (e.g. accounting records). Exact periods depend on the data category and your contractual relationship.
7. Your rights
Where applicable law allows, you may request access, rectification, erasure, restriction, data portability, object to processing based on legitimate interests and withdraw consent (without affecting the lawfulness of earlier processing). You may lodge a complaint with your competent data-protection authority.
8. Security and changes
We apply reasonable technical and organisational measures to protect personal data. We may update this notice; the revision date will be shown at the bottom of the page or we will notify you where the law requires.