Privacy Policy

Pursuant to Art. 19 FDPA & Art. 13/14 GDPR

Last updated: May 2026

1. Data Controller

House of Goods GmbH
Zürcherstrasse 39d, 8952 Schlieren, Switzerland
Email: service@emparo.ch
Phone: +41 44 513 77 57

2. Data We Collect

When the customer use our online shop at emparo.ch, we process the following personal data:

a) When visiting the website

• IP address (anonymised)
• Date and time of access
• Browser type and operating system
• Pages visited and time spent

b) When placing an order / creating an account

• First and last name
• Email address
• Billing and delivery address
• Payment data (processed by payment provider)
• Order history

c) When contacting us

• Name, email address, message content

d) Newsletter

• Email address (only with explicit consent via double opt-in)

3. Purposes of Processing

Processing takes place the data for the following purposes:

• Processing orders and fulfilling contracts
• Customer communication and support
• Sending order confirmations and invoices
• Improving our website and services (analytics)
• Sending newsletters (with consent only)
• Complying with legal obligations (e.g. accounting)

4. Legal Basis

The processing of the data is based on:

• Performance of a contract (Art. 6(1)(b) GDPR / Art. 31(2)(a) FDPA): order processing and customer service
• Legitimate interests (Art. 6(1)(f) GDPR / Art. 31(1) FDPA): website analytics, security, fraud prevention
• Consent (Art. 6(1)(a) GDPR / Art. 31(1) FDPA): newsletter, non-essential cookies
• Legal obligation (Art. 6(1)(c) GDPR): retention requirements under Swiss law (OR/VAT)

5. Disclosure to Third Parties

We only share the data where necessary for the fulfilment of a contract or where the customer have given consent. Possible recipients include:

Shipping & Logistics

Delivery data (name, address) is passed to our shipping partners (e.g. Swiss Post, DHL) for order fulfilment.

Payment Processing

Payments are processed by Stripe (Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland). Payment data is transmitted directly to Stripe and processed there. We do not store full payment details on our servers. Stripe is certified under EU Standard Contractual Clauses and the Data Privacy Framework (DPF). For more information: stripe.com/privacy

IT Infrastructure & Shop System

Our shop is built on Magento (Adobe Commerce). Servers are located in Switzerland and/or the EEA. Data processing agreements are in place with all processors.

Email Marketing

For our newsletter we use Mautic (open-source software, self-hosted on our own servers in Switzerland). Your email address is stored exclusively on our own infrastructure and is not shared with third parties.

Analytics

Use is made of Matomo (open-source software, self-hosted on our own servers in Switzerland) for website analytics. No data is transmitted to third parties. IP addresses are anonymised before storage. Details are provided in Section 7.

6. Retention Periods

Storage takes place the data only for as long as necessary for the respective purpose or as required by law:

• Order data: 10 years (statutory retention obligation under Swiss OR)
• Customer account data: Until account deletion or upon request
• Newsletter: Until unsubscription
• Contact enquiries: 2 years after conclusion of communication
• Server logs: 30 days (anonymised)

7. Cookies & Tracking

Our website uses cookies — small text files stored in your browser.

Essential Cookies

These cookies are strictly necessary for the operation of the shop (e.g. shopping cart, login session) and cannot be disabled.

Analytics Cookies

Use is made of Matomo (self-hosted, no third-party transmission) to anonymously analyse user behaviour. IP addresses are fully anonymised before storage. Under Swiss law, consent for self-hosted Matomo is not strictly required; however, we provide an opt-out option.

Marketing Cookies

With your consent, cookies may be set for personalised advertising purposes.

It is possible to adjust your cookie preferences at any time via our cookie banner.

8. Your Rights

You have the following rights regarding your personal data:

• Right of access – It is possible to request information about the data we hold about the customer (Art. 25 FDPA / Art. 15 GDPR)
• Right to rectification – It is possible to request correction of inaccurate data (Art. 32 FDPA / Art. 16 GDPR)
• Right to erasure – It is possible to request deletion of the data, subject to any statutory retention obligations (Art. 32 FDPA / Art. 17 GDPR)
• Right to restriction – It is possible to request restriction of processing (Art. 18 GDPR)
• Right to object – It is possible to object to the processing of the data (Art. 21 GDPR)
• Right to data portability – It is possible to receive the data in a machine-readable format (Art. 20 GDPR)
• Right to withdraw consent – Any consent given may be withdrawn at any time

To exercise your rights, please contact: service@emparo.ch
Phone: +41 44 513 77 57

Requests are generally answered within 30 days, free of charge.

9. Right to Lodge a Complaint

There exists a right to lodge a complaint with the competent supervisory authority:

Federal Data Protection and Information Commissioner (FDPIC)
Feldeggweg 1, 3003 Bern, Switzerland
www.edoeb.admin.ch

Customers residing in the EU may additionally contact the data protection authority of their country of residence.

10. Data Security

We implement appropriate technical and organisational measures to protect the data, including:

• SSL/TLS encryption (HTTPS) for all data transmissions
• Access restrictions to personal data
• Regular security updates and backups
• Contractual obligations for all data processors

11. Changes to This Privacy Policy

The right is reserved to update this Privacy Policy as needed, for example when our services change or legal requirements evolve. The current version is always available on this page.