Skip to main content

Privacy Policy

Last updated: October 2026

1. Data Protection at a Glance

General Information

The following notes provide a simple overview of what happens to your personal data when you visit this website or shop with us. Personal data is any data that can be used to identify you personally. Detailed information on data protection can be found in the privacy policy below.

Data Collection on This Website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. Its contact details can be found in the section "Notice concerning the responsible party" in this privacy policy.

How do we collect your data?

Some data is collected because you provide it to us, e.g. when creating a customer account, placing an order, filling in the contact form, or using the chat assistant.

Other data is collected automatically when you visit the website, in particular technical data (e.g. browser type, operating system, page visited, time of the visit). This is collected in anonymised form as part of our self-hosted web analytics (Matomo) and without the use of cookies.

What do we use your data for?

Some data is collected to ensure the website is provided without errors. Other data is used for anonymised analysis of user behaviour. Order data is used to fulfil the contract, process payment, deliver the goods, and maintain a customer account. Input in the chat assistant is used to answer your questions and to improve the assistant (see section 7).

What rights do you have regarding your data?

You have the right at any time to obtain information free of charge about the origin, recipients and purpose of your stored personal data. You also have the right to request the correction, deletion or restriction of the processing of this data, and to object to processing. If you have given consent to data processing, you may revoke this consent at any time with effect for the future. You also have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC / EDÖB).

For this and any further questions on data protection, you may contact us at any time at info@deluxe-moebel.ch.

2. Hosting

We host the content of our website and the associated database with the following provider:

Hetzner Online GmbH

This website is hosted externally by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. Personal data collected on this website is stored on Hetzner's servers within the EU. This may in particular include IP addresses, order and account data, contact inquiries, meta and communication data, and other data generated via the website.

External hosting is carried out for the purpose of fulfilling our contracts with customers and in the interest of a secure, fast and efficient provision of our online shop. Hetzner processes your data only to the extent necessary to fulfil its service obligations and exclusively on our instructions. A corresponding data processing agreement is in place with Hetzner.

3. General Information and Mandatory Disclosures

Data protection

We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations — in particular the revised Swiss Federal Act on Data Protection (FADP/revFADP, "DSG/revDSG") — as well as this privacy policy.

When you use this website or place an order with us, various pieces of personal data are collected. This privacy policy explains what data we collect, what we use it for, and how and for what purpose this happens.

Please note that data transmission over the internet (e.g. when communicating by email) may have security vulnerabilities. Complete protection of data against access by third parties is not possible.

Notice concerning the responsible party

The party responsible for data processing on this website is:

Deluxe Moebel GmbH

Fabrikstrasse 26a

CH-9220 Bischofszell

Phone: +41 71 230 10 70

Email: info@deluxe-moebel.ch

The responsible party is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

Retention period

Unless a more specific retention period is stated within this privacy policy, your personal data will remain with us until the purpose for the processing no longer applies. Invoicing and accounting-related data is retained for ten years due to statutory commercial retention requirements under Swiss law. Raw data from our web analytics (Matomo) is automatically deleted after 180 days. If you assert a legitimate request for deletion or revoke your consent, your data will be deleted unless we have other legally permissible reasons for retaining it.

Chat logs (section 7) are retained [retention period: X months]; saved configurations that are not linked to a customer account are deleted after 24 months [retention period to be checked].

Recipients of personal data

In the course of our business activities we work with carefully selected external service providers who process data on our behalf (processors) or to whom we transmit data for the performance of a contract. We only pass on personal data to external parties where this is necessary for contract performance, where we are legally obliged to do so, where we have a legitimate interest in the disclosure, or where another legal basis permits the disclosure. Corresponding data processing agreements are in place with all processors.

We use in particular the following service providers:

  • Stripe (Stripe Payments Europe, Limited resp. Stripe, Inc.) — for processing payments in our online shop (including credit card, TWINT, Apple Pay, Google Pay). This may involve a transfer of data to the USA.
  • Brevo (Sendinblue SAS, Paris, France) [entity to be checked] — processor for sending order confirmations and other transactional emails via our email delivery provider.
  • Hetzner Online GmbH (Germany/EU) — hosting of our online shop and the associated database, see section 2.
  • Cloudflare, Inc. — content delivery network (CDN), reverse proxy and security services (including protection against attacks) for our website. This may involve a transfer of data to the USA.
  • Matomo (self-hosted on our own infrastructure) — web analytics. Matomo runs on our own servers; no data is shared with third parties. See section 6 for details.
  • Anthropic PBC (USA) — processor for the chat assistant; the transfer to the USA is based on standard contractual clauses [to be checked]. See section 7 for details.

Many data processing operations are only possible with your express consent (e.g. linking the chat to web analytics). You may revoke consent already given at any time. The lawfulness of data processing carried out prior to the revocation remains unaffected.

Right to data portability

You have the right to receive data that we process automatically on the basis of your consent or in fulfilment of a contract, in a common, machine-readable format, or to have it transferred to a third party, insofar as this is technically feasible.

Access, rectification, deletion and objection

Under applicable data protection law (DSG/revDSG), you have the right at any time to obtain free information about your personal data stored by us, its origin and recipients, and the purpose of the processing. You also have the right to rectification, deletion or restriction of the processing of your data, as well as a right to object to certain processing. For this and any further questions regarding personal data, you may contact us at any time at info@deluxe-moebel.ch.

You also have the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority for data protection matters is the Federal Data Protection and Information Commissioner (FDPIC/EDÖB), Feldeggweg 1, CH-3003 Bern (www.edoeb.admin.ch).

SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, such as orders, payment data or inquiries, this site uses SSL/TLS encryption. You can recognise an encrypted connection by the fact that the address bar of the browser changes from "http://" to "https://" and by the lock icon in your browser bar.

4. Data Collection on This Website

Cookies

Our online shop uses cookies sparingly. Our web analytics (Matomo, see section 6) operates entirely without cookies.

On the one hand, we use technically necessary cookies required to operate the shop, in particular for:

  • the shopping cart function,
  • logging in to your customer account (session cookie),
  • security functions (e.g. protection against form abuse).

These necessary cookies are automatically deleted at the end of your session or after a short time.

Customer account and registration

When you create a customer account, we collect and store the data you provide (e.g. name, address, email address, password in encrypted form, and your order history). We use this data to process your orders and to provide the functions of your customer account. You may request deletion of your customer account at any time, provided no statutory retention obligations apply.

Order, billing and delivery data

When you place an order, we collect the data necessary to fulfil the contract, in particular name, billing and delivery address, email address, phone number, and details of the ordered goods. This data is passed on for order processing, invoicing and delivery to logistics partners commissioned by us, to the extent necessary for contract performance. Invoice data is retained for ten years due to statutory retention obligations.

Configurator and saved configurations

In the configurator you can save a configuration. It receives a code in the format DS-XXXX-XXX and a PDF. Logged-in customers find saved configurations in their customer account. Configurations that are not linked to a customer account are deleted after 24 months.

Payment processing — Stripe

Payment processing in our online shop is carried out via the payment service provider Stripe (Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Dublin, Ireland, resp. Stripe, Inc., USA). Via Stripe you can pay by, among others, credit card, TWINT, Apple Pay or Google Pay. Data you enter during the payment process (e.g. card details) is transmitted directly to Stripe and processed there; we ourselves do not receive or store complete payment card data. Data transmission may also take place to the USA. Stripe processes your data as an independent responsible party resp. as our processor, in accordance with applicable law and the agreements concluded with Stripe. For more information, see Stripe's privacy policy at https://stripe.com/ch/privacy.

Contact form

If you send us inquiries via the contact form, your details from the inquiry form, including the contact data you provide, are stored by us for the purpose of processing the inquiry and for any follow-up questions. We do not pass on this data without your consent. The data remains with us until you ask us to delete it, revoke your consent, or the purpose for storing the data no longer applies; mandatory statutory retention periods remain unaffected.

Inquiries by email or telephone

If you contact us by email or telephone, your inquiry, including all resulting personal data (name, inquiry), is stored and processed by us for the purpose of handling your request. We do not pass on this data without your consent.

5. Order Emails

Sending via Brevo

For sending order confirmations and other transactional emails (e.g. shipping notifications), we use, via our email delivery provider, the Brevo service provided by Sendinblue SAS, Paris, France [entity to be checked], as processor. Processing is carried out to fulfil the purchase contract concluded with you.

6. Web Analytics and Other Tools

Matomo (self-hosted)

We use the web analytics service Matomo to analyse the use of our website. Matomo is self-hosted by us — no data is transmitted to third parties, and all data remains on our own servers.

Our Matomo implementation is configured so that:

  • no cookies are set,
  • your IP address is truncated resp. anonymised before storage,
  • visits from browsers sending the "Do Not Track" signal are not recorded,
  • the collected raw data is automatically deleted after 180 days.

We do not use services such as Google Analytics.

Cloudflare

We use the service Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA, as a content delivery network (CDN), reverse proxy, and to protect our website against attacks (e.g. DDoS protection). Cloudflare routes traffic between your browser and our servers; in doing so, technical data such as your IP address may be processed. This may involve a transfer of data to the USA. Cloudflare acts as our processor in this context. For more information, see Cloudflare's privacy policy at https://www.cloudflare.com/privacypolicy/.

7. Customer Assistant (Chat)

Chat assistant

deluxe-sonnenschirme.ch offers a chat assistant that answers questions about our products, the configurator, ordering, delivery and payment. The answers are generated from our own product documentation. To generate an answer, we transmit your question and excerpts from our documentation to Anthropic PBC (USA) as processor; no account or order data is transmitted. Please do not enter personal data such as your address or payment information in the chat.

Logging

We store the conversation history (your messages, the answers, time, language, the page visited, browser type and a pseudonymised identifier of your IP address) for quality assurance, to improve the assistant and to prevent abuse. The basis is our legitimate interest (Art. 31 FADP; Art. 6(1)(f) GDPR for visitors from the EEA). The logs are only accessible to authorised staff and are retained for [retention period: X months]. You can request deletion of a conversation via the contact form.

Web analytics

We send chat events to the same Matomo as the rest of our web analytics (operated on our own servers, without cookies, with a shortened IP address) in order to understand which pages were viewed before and after a question. A pseudonymous visitor identifier is used; if you are logged in to your customer account, your customer number is used instead. Only the status of the answer and a conversation identifier are transmitted to Matomo, not the content of your questions.