Privacy Policy

1. Data Controller

The entity responsible for data processing on this website is:

Carbon Performance Design

Scheideggstrasse 59
8002 Zürich

Switzerland
Е-Mail: shop@carbon-design.ch
Web: https://carbon-design.ch
Tel.: +41 78 447 12 36

2. Principles of Data Processing

We process personal data only to the extent necessary to provide our services, where there is a legal basis for doing so, or where you have given your consent. Data processing is carried out in accordance with the European General Data Protection Regulation (GDPR), the Swiss Data Protection Act (DSG), and other applicable data protection regulations.

Since we also deliver products to customers in Germany and the EU, the GDPR applies directly to this processing (Art. 3(2) GDPR).

3. Data Collection When Visiting the Website

3.1. When you visit our website, the hosting provider automatically collects technical access data in what are known as server log files:

  • IP address of the requesting device,
  • date and time of access,
  • browser type and version,
  • operating system used,
  • referrer URL (previously visited page), and
  • name of the page accessed.

3.2. Our website is powered by WordPress (automattic.com), and our online store uses the WooCommerce plugin. WordPress and WooCommerce process technical usage data and order data on our web server. The server is operated by a hosting provider with whom we have a data processing agreement.

3.3. WordPress sets technically necessary cookies for the session. These are required for the shopping cart to function and for the checkout process, and are set without requiring separate consent.

3.4. We also use the TranslatePress plugin to provide a multilingual version of the website. TranslatePress stores your selected language preference in a cookie locally in your browser. No personal data is transferred to third parties in this process.

4. Data Processing in the Online Store

4.1. When you place an order in our store, we collect the information necessary to process the order:

  • first and last name,
  • shipping and billing address,
  • email address,
  • phone number,
  • order details and date, and
  • Zahlungsinformationen (verarbeitet durch den jeweiligen Zahlungsdienstleister)

We use this data exclusively to process and fulfill your order, to communicate with you regarding the order, and to comply with legal retention requirements.

4.2. Once we receive your order, you will receive an automatic confirmation of receipt and, following a manual review, a binding order confirmation via email. All order-related communication (delivery status, inquiries, complaints) will also be handled via email or phone.

4.3. In certain cases, we may request identification documents or additional information to prevent fraud. This information will be used solely for verification purposes; it will not be stored or shared with third parties. If the request is not fulfilled, the order will be canceled and the amount refunded.

4.4. Payments are processed through external payment service providers. Depending on the payment method you choose, your payment details will be transmitted to the respective provider. We do not store any complete payment details (card numbers, etc.) ourselves.

4.5. To deliver your order, we will provide the shipping carrier with your name and shipping address. No other data will be shared.

5. Getting in touch

If you contact us by email or through the contact form on our website, the information you provide (name, email address, message content) will be stored for the purpose of processing your inquiry. This information will not be disclosed to third parties without your consent and will be deleted once your inquiry has been fully resolved, provided there are no legal retention requirements to the contrary.

6. Disclosure of Data to Third Parties

Your personal data will only be disclosed to third parties in the following cases:

  • Necessary for the performance of the contract (shipping provider, payment service provider, or manufacturer's repair shop),
  • A legal obligation (e.g., the obligation to provide information to tax authorities), or
  • or you have given your express consent—

We do not share this information for advertising or other commercial purposes. Data processors (e.g., payment service providers and shipping companies) are contractually obligated to process data only in accordance with our instructions.

7. Transfer of Data to Third Countries

Some of the payment service providers and technical service providers we use are based or have servers outside of Switzerland and the EU, particularly in the United States. Data transfers to such third countries are made exclusively on the basis of appropriate safeguards in accordance with Article 46 of the GDPR, in particular the EU Standard Contractual Clauses, or an adequacy decision by the European Commission or the Swiss Federal Council. We only use service providers that can demonstrate an adequate level of data protection.

8. Retention period

We retain personal data only for as long as is necessary for the respective processing purposes:

  • Order data and invoices: 10 years (retention requirements under tax and commercial law in accordance with the Swiss Code of Obligations and the German Commercial Code)
  • Communication not related to a contract: up to 3 years after the end of the contact
  • Technical log files: typically 30–90 days
  • Data related to rejected orders or fraud checks: immediate deletion upon completion of the process

9. Your Rights

As a data subject, you have the following rights, which you may exercise at any time by contacting us:

  • Right of access (Art. 15 GDPR / Art. 25 DSG): Information about the data we process
  • Right to rectification (Art. 16 GDPR): Correction of inaccurate data
  • Right to erasure (Art. 17 GDPR): Erasure of your data, provided that there are no legal obligations to retain it
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR): Receiving your data in a machine-readable format
  • Right to object (Art. 21 GDPR): Objection to processing based on legitimate interests
  • Right of withdrawal: You may revoke any consent you have given at any time, effective for the future

To exercise your rights, please contact us by email at: shop@carbon-design.ch.

You have the right to file a complaint with the competent data protection supervisory authority. In Switzerland, this is the Federal Data Protection and Information Commissioner (FDPIC), edoeb.admin.ch. For EU customers, the competent authority is the data protection authority of the respective member state.

10. Data Security

Our website uses SSL/TLS encryption for the transmission of sensitive data (indicated by “https://” in the address bar). We take technical and organizational measures to protect your data against unauthorized access, loss, or tampering. However, complete protection against all risks associated with internet communication cannot be guaranteed.

11. Changes to this Privacy Policy

We reserve the right to update this Privacy Policy as needed, particularly in the event of changes to the services we use or to legal requirements. The current version is available at any time at http://carbon-design.ch/privacy available.

12. Contact and Privacy Policy

If you have any questions about data protection or wish to exercise your rights, please contact us by email (shop@carbon-design.ch) or by phone (+41 784 471 236).