Privacy Policy
Privacy Policy
As of: September 2026
1. Responsible Party
The party responsible for processing personal data in connection with this website and our online shop is:
Tsola Sofia’s Tsoureki
Sole Proprietorship
Owner:
Sofia Tsola
Höhleweg 21
5024 Küttigen
Switzerland
Email:
info@sofiastsoureki.com
Website:
www.sofiastsoureki.com
2. General Information
Protecting your personal data is important to us.
We process personal data confidentially and in accordance with applicable Swiss data protection law.
This privacy policy informs you about what personal data we process, for what purposes, and to which service providers data may be shared in connection with our website and online shop.
3. What personal data we process
Depending on your use of our website and our offerings, we may process the following personal data, among others:
- First and last name
- Billing and shipping address
- Email address
- Phone number, if provided
- Order and purchase information
- Payment and transaction information
- Customer account information
- Company and contact details of business customers
- Information from contact and B2B inquiries
- Newsletter subscriptions
- Communication with us
- IP address
- Browser and device information
- Technical usage and log data
4. Purposes of data processing
We process personal data specifically for the following purposes:
- Processing and fulfilling orders
- Organizing production, shipping, and pickup
- Payment processing
- Customer communication
- Answering inquiries
- Processing and reviewing B2B inquiries
- Managing customer accounts
- Sending our newsletter
- Operating and securing our website
- Preventing misuse and fraud
- Improving our offerings
- Fulfilling legal retention and verification obligations
5. Shopify
Our online shop is operated via Shopify.
Shopify provides, among other things, the technical shop infrastructure, checkout, customer accounts, and other functions of our online shop.
When using our shop, personal data may be processed by Shopify International Limited, as well as by companies affiliated with Shopify and commissioned service providers.
This may also involve processing personal data outside of Switzerland.
Shopify initially processes data from customers in Switzerland via Shopify International Limited in Ireland and uses other companies and subcontractors to provide its services.
6. Orders and customer accounts
When you place an order or use a customer account, we process the data necessary to process your order and maintain the customer relationship.
This includes, in particular:
- Contact details
- Delivery and billing address
- Products and quantities ordered
- Order history
- Payment and transaction information
- Details regarding delivery or pickup
To the extent necessary for processing your order, this data may be passed on to participating service providers.
7. Payment processing
The payment methods offered in the respective checkout are available for payments.
Payment processing is partly carried out by external payment service providers.
The data required for payment is transmitted directly or via Shopify to the respective payment service provider.
We generally only receive the payment and transaction information necessary for the allocation and administration of the payment.
8. Shipping and delivery
If an order is shipped or delivered by an external service provider, the data necessary for delivery may be transmitted to the relevant shipping or transport service provider.
This may include, in particular:
- Name
- Delivery address
- Email address
- If applicable, phone number
- Order information required for delivery
The data is only passed on to the extent necessary for delivery.
9. Contacting us
If you contact us via a contact form or email, we process the information you provide to handle and respond to your inquiry.
This may include, in particular, your name, email address, contact details, and the content of your message.
Our business email communication takes place, among other things, via Apple's iCloud Mail.
You can reach us at the following address:
info@sofiastsoureki.com
10. B2B inquiries and business customers
For an inquiry regarding B2B access, we process the company and contact data you provide to assess a possible collaboration.
This may include, in particular:
- Company or business name
- First and last name of the contact person
- Email address
- Phone number
- Business and billing address
- Website or social media presence
- Desired assortment
- Expected order quantities
- Other information provided by you
We use this data specifically for reviewing the inquiry, for communication, and for establishing and managing a potential business relationship.
Submitting a B2B inquiry does not create a right to B2B access.
11. Newsletter
If you subscribe to our newsletter, we use your email address to send you occasional news, insights into Sofia's bakery, and information about Sofia's Tsoureki.
For registration, we use a confirmation process where you must confirm your registration by email.
You can revoke your consent at any time with effect for the future.
You can do this by using the unsubscribe link in each newsletter email.
12. Cookies and similar technologies
Our website uses cookies and similar technologies.
Some of these technologies are necessary for the operation of our online shop. These include, for example, functions for:
- Shopping cart and checkout
- Language settings
- Customer accounts
- Security and fraud prevention
- Technical shop functions
Insofar as non-essential analysis or marketing technologies are used beyond this and consent is required, these will be used in accordance with the selected privacy settings.
13. Microsoft Clarity
We use Microsoft Clarity, an analytics service from Microsoft Corporation, to better understand how visitors use our website.
Clarity can collect information about page views, clicks, scrolling behavior, and other interactions on our website. This can be used to create heatmaps and anonymized or pseudonymized session recordings, among other things.
This information helps us improve the user-friendliness, presentation, and technical functionality of our website.
Microsoft Clarity may use cookies and similar technologies for this purpose and process technical information such as IP address, browser and device information, and usage data.
Insofar as consent is required for the use of such technologies, data processing will only take place in accordance with your selection in the cookie banner.
Further information on data processing by Microsoft can be found in Microsoft's privacy information.
14. Google Services and Google Analytics
We use Shopify's Google & YouTube channel to connect our online shop with Google services.
If Google Analytics is activated in our shop, we use Google Analytics for statistical evaluation of the use of our website. This may involve processing information about page views, devices used, browsers, origin of website visits, and interactions with our online shop.
Google may use cookies and similar technologies for this purpose.
Insofar as consent is required, the corresponding data processing will only take place after your consent via our privacy settings or the cookie banner.
We use the information obtained specifically to analyze and improve our website, our offerings, and our marketing measures.
In the context of using Google services, personal data may also be processed by Google and companies affiliated with Google outside of Switzerland.
15. Technical Data and Server Logs
When accessing our website, technical data may be automatically collected.
This may include, in particular:
- IP address
- Date and time of access
- Browser
- Operating system
- Device type
- Pages accessed
- Origin and destination page
- Technical error and security information
This data is used specifically to ensure the secure and reliable operation of our website.
16. Disclosure of Personal Data
We only disclose personal data if this is necessary for the provision of our services, a legal obligation exists, or another legally permissible reason is present.
Recipients may include, in particular:
- Shopify and its service providers
- Payment service providers
- Shipping and transport service providers
- IT and hosting service providers
- Email and communication services
- Service providers we use for the operation of our shop
- Authorities, insofar as we are legally obliged to disclose data
We do not sell personal data.
17. Data processing abroad
Some of the service providers we use may process personal data outside of Switzerland.
The relevant countries may differ from Switzerland in terms of their data protection level.
To the extent required by law, we ensure appropriate safeguards for the transfer and processing of personal data abroad.
18. Data retention
We retain personal data only for as long as necessary for the respective processing purpose or as required by legal retention obligations.
Order, contract, payment, and accounting documents may be retained for several years, particularly due to legal requirements.
Data that is no longer needed for the processing of a business relationship and for which no legal retention obligation exists will be deleted or anonymized, insofar as this is appropriate and technically possible.
19. Data Security
We take appropriate technical and organizational measures to protect personal data from loss, misuse, unauthorized access, or unlawful processing.
This includes, in particular, security measures of our utilized platforms and service providers.
However, absolute security in the electronic transmission or storage of data cannot be guaranteed.
20. Your rights
Within the scope of applicable data protection law, you have the right, in particular, to request information as to whether and what personal data we process about you.
Depending on the legal requirements, you can, in particular:
- Request information about your personal data
- Have inaccurate personal data corrected
- Request the deletion of personal data
- Object to specific data processing
- Revoke a given consent for the future
To exercise your rights, you can contact us at:
info@sofiastsoureki.com
We may request appropriate proof of your identity to process a request.
21. Changes to this Privacy Policy
We may amend this privacy policy if our data processing, the services used, or the legal framework changes.
The current version published on this website always applies.