Privacy policy

Last updated: 24 August 2026

Schöni Food AG, Niedermattstrasse 30, 4538 Oberbipp, Switzerland (CHE-108.193.021) operates the online shop at shop.schoenifood.ch. This privacy policy explains which personal data we process when you visit the shop, open an account, place an order or contact us.

A separate privacy policy applies to the website schoenifood.ch. If there is a conflict between our general terms and conditions and this privacy policy, this privacy policy prevails in all matters concerning the processing of personal data.

Controller and contact

The controller for the processing of your personal data is:

Schöni Food AG
Niedermattstrasse 30
4538 Oberbipp
Switzerland
CHE-108.193.021

Contact for data protection matters:
Simone Franz, Marketing & Communications
E-mail: simone.franz@schoenifood.ch
Telephone: +41 32 636 60 60

Applicable law

We process your personal data in accordance with the Swiss Federal Act on Data Protection (FADP) and the Data Protection Ordinance (DPO). The shop is aimed at customers in Switzerland. We do not deliver to the EU or to the United Kingdom.

Operation of the shop by Shopify

The shop runs on the platform of Shopify Inc. and its affiliated companies. Shopify operates the technical infrastructure on our behalf and processes personal data in doing so. The servers are located in Canada and the United States, among other places.

Shopify also processes some of the data for its own purposes, for example for fraud detection and for the further development of the platform. For this processing, Shopify is the controller itself. You can find information on this in the Shopify privacy policy for consumers and in the Shopify privacy portal.

Which personal data we process

Depending on how you use the shop, we process the following categories of personal data:

Contact data such as name, billing address, delivery address, e-mail address and telephone number.
Order data such as products ordered, time of order, order value, returns and cancellations.
Payment data such as payment method, payment confirmation and transaction details. Credit card numbers are processed directly by the payment service provider. We do not store full card numbers.
Account data such as user name, password (stored only as a hash value) and your settings.
Communication data such as your enquiries to our customer service and our replies.
Technical data such as IP address, device type, browser type, time of access and the pages visited.

Where the data comes from

Directly from you, when you open an account, place an order or contact us.
Automatically through the shop, when you visit the shop, from your device and through cookies and similar technologies.
From our service providers, who process data on our behalf.

Purposes and grounds for processing

Fulfilment of your order. We process your data to fulfil your order, handle payment, arrange shipping and process returns and exchanges. The basis is the performance of our contract with you.
Customer account and customer service. We process your data to manage your account, respond to your enquiries and maintain our business relationship with you. The basis is the performance of our contract with you.
Security and fraud prevention. We process your data to authenticate your account, operate the shop securely and detect misuse. The basis is our overriding interest in secure operation. Please protect your login credentials and do not share them with third parties.
Accounting and legal obligations. We process your data to comply with retention obligations under tax and commercial law and to respond to lawful orders from authorities or courts. The basis is a legal obligation.
Newsletter and advertising. We process your data to send you information about our products and offers. The basis is your consent.
Analysis of shop usage. We process your data to evaluate and improve the shop. The basis is your consent for the cookies used for this purpose and our overriding interest in a functioning offering.

Disclosure to third parties

We disclose personal data to the following recipients:

Shopify as the operator of the platform.
Payment service provider: Shopify Payments.
Logistics and shipping service provider: Swiss Post Ltd.
IT, hosting and support service provider: avolut AG.
Authorities and courts, where we are legally required to do so.
Acquirers or parties involved in a corporate transaction, for example a sale or a merger.

All service providers that process data on our behalf are contractually bound to confidentiality and to compliance with data protection law.

Disclosure abroad

We transfer personal data to countries outside Switzerland, in particular to the EU, Canada and the United States. For countries that do not provide adequate data protection according to the Federal Council's list of countries, we rely on the European Commission's standard contractual clauses as recognised by the FDPIC, or on another safeguard under Art. 16 and 17 FADP.

Cookies and tracking

The shop uses cookies and similar technologies. Details of which cookies are used, how long they are stored and who sets them can be found in our cookie policy.

You can withdraw your consent for non-essential cookies at any time via the cookie settings in the shop.

If you sign up for the newsletter, we use your e-mail address to send you information about our products and offers. You can unsubscribe at any time using the unsubscribe link in every e-mail. After you unsubscribe, we keep your address on a suppression list so that we do not contact you again. Even after you unsubscribe, we continue to send you non-promotional messages about your account and your orders.

Retention

We retain personal data for as long as necessary for the relevant purpose. After that, we delete or anonymise it.

Order and invoice data: 10 years after the end of the financial year (Art. 958f CO).
Customer account: until you delete the account.
Technical data and shop log data: retained by Shopify as the platform operator according to Shopify's retention periods.
Other data, for example customer service correspondence: for as long as necessary to handle the matter and to assert or defend claims.
Newsletter consent: until withdrawal. We retain evidence of the withdrawal thereafter.

Your rights

You have the following rights. These rights are not absolute. We may restrict or refuse a request where a law, an overriding interest or the rights of third parties require this.

Right of access. You can request information on whether and which personal data we process about you.
Rectification. You can request that we correct inaccurate data.
Erasure. You can request that we delete your data. This does not apply to data we must continue to store because of statutory retention obligations.
Data release and data portability. You can request that we release the data you have provided to us in a common electronic format, or that we transfer it to a third party where this is technically feasible.
Objection. You can object to the processing of your data, in particular to processing for advertising purposes.
Withdrawal of consent. You can withdraw consent you have given at any time with effect for the future. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Please address your request to the contact details above. We must verify your identity before providing information. You may appoint a representative. In that case we require proof of authorisation. We generally respond to your request within 30 days. Exercising these rights causes you no disadvantage.

Complaints

If you disagree with the way we process your personal data, please contact us first at the contact details above. You may also lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, Switzerland.

Data security

We take appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access. Our employees and our service providers are bound to confidentiality. However, transmission over the internet is never entirely secure. Please do not send us sensitive data through unsecured channels.

Children's data

The shop is not aimed at children. We do not knowingly collect personal data from persons under the age of 16. If you are a parent or legal guardian and become aware that a child has provided us with data, please contact us at the details above. We will then delete the data.

Third-party websites and links

The shop may contain links to websites or platforms operated by third parties. We are not responsible for their content or for their data processing. Please review their privacy policies. A link does not mean that we endorse the content of these providers.

Changes to this privacy policy

We may amend this privacy policy, for example if our processes or the legal requirements change. We publish the amended version in the shop and update the date of the last version. The version published at the time applies.

Language versions

This privacy policy exists in German, French and English. In the event of discrepancies between the versions, the German version prevails.