Who is responsible
Zefiros, Lopperstrasse 1, 6010 Kriens, Luzern, Switzerland. Email: [email protected]. This policy explains how we handle personal data on https://zefiros.ch under the Swiss Federal Act on Data Protection (FADP) and, where it applies, the EU General Data Protection Regulation (GDPR).
What data we process and why
- Visiting the website: our server and Cloudflare process your IP address, browser type, the pages you request and the time of access. We use this to deliver the site, keep it secure and fix errors. Legal basis: our legitimate interest in a secure and working website.
- Contact form and email: if you write to us, we process the name, email address and message you send, to answer your request.
- Repairs and services: the details you give us about yourself and your instrument, to carry out the work you ask for.
- Shop orders: if you buy from us, we process your name, billing and delivery address, email address, phone number if you give one, the order contents and payment status. We use this to fulfil the contract, ship goods and meet our accounting duties.
- Customer account: if you create an account, we store your account details and order history.
Payments
If you pay online, payments are processed by WooPayments (Automattic) and its payment partner Stripe. We do not see or store your full card number. These providers handle your data under their own privacy policies.
Service providers
We use the following providers who may process personal data on our behalf:
- Cloudflare: DNS, content delivery and security filtering for this website, and Cloudflare Turnstile, a bot check on our login, registration, password reset and checkout forms. Turnstile processes technical data such as your IP address and browser details to tell people from automated bots.
- Automattic (Jetpack, WooCommerce services): site security and visit statistics.
- Anti-spam service for forms: to block automated spam submissions.
- Email service provider: to send and receive emails from the website.
- Shipping carriers: they receive your delivery address and contact details to deliver your order.
Some of these providers are located outside Switzerland and the EU, for example in the USA. Where this is the case, we rely on safeguards such as standard contractual clauses or an adequacy decision.
Cookies
This website uses only cookies needed for its operation: shop cookies that remember your cart and login, a language cookie that remembers your chosen language, and security cookies set by Cloudflare. You can block cookies in your browser settings, but parts of the shop may then stop working.
How long we keep data
We keep contact messages as long as needed to answer you and handle any follow-up. Order and accounting records are kept for 10 years as required by Swiss law. Account data is kept until you ask us to delete it. Server logs are kept only for a short period.
Your rights
You have the right to ask for access to your data, to have it corrected or deleted, to restrict or object to its processing, and to receive it in a portable format. If you gave consent, you can withdraw it at any time. To use these rights, write to [email protected]. You can also complain to the Swiss Federal Data Protection and Information Commissioner (edoeb.admin.ch) or, if you live in the EU, to your local data protection authority.
Changes to this policy
We may update this policy when our services change. Last updated: October 2026.