We respect your privacy

We use necessary cookies to run the shop. With your consent, we also use Google Analytics to understand and improve how our website is used. Learn more in our Cookie Policy and Privacy Policy.

Free shipping from CHF 99.00

SCHEROH

Privacy policy

Last updated: September 10, 2026

Protecting your personal data is important to Swiss Trend Trade GmbH. In this privacy policy we inform you which personal data we collect in connection with the use of our Scheroh online shop, how we process it and what rights you have. Processing takes place in accordance with the Swiss Data Protection Act (revFADP).

1. Controller

The controller responsible for the processing is:

Swiss Trend Trade GmbH
Brand: Scheroh
Bahnhofstrasse 15
8855 Wangen (SZ)
Switzerland

Email: info@scheroh.ch
Phone: +41 79 256 17 47
Website: scheroh.ch

2. What data we process

We process personal data that you provide yourself when placing an order or contacting us, as well as technical data that arises when you visit the website:

  • form of address, first name and surname,
  • billing and delivery address (street, address supplement, postcode, town, country),
  • email address and – if provided – telephone number,
  • order and invoice data (items ordered, amounts, order number, chosen language),
  • payment information (processed by the payment service provider, see section 5),
  • communication data, such as your enquiries to us and our replies,
  • technical data such as IP address, date and time, browser and device data, referrer and pages visited,
  • your cookie consent settings.

We do not operate customer accounts: orders can only be placed as a guest, and our shop has no login or registration. We do not currently send a newsletter.

3. Purposes of processing

  • processing and shipping of orders,
  • payment processing,
  • customer service and communication,
  • handling returns, withdrawals and warranty claims,
  • invoicing and accounting,
  • fraud prevention, operational security and the stability of our systems,
  • analysis and improvement of our offering (only with your consent),
  • compliance with legal obligations.

4. Legal bases

Processing is based in particular on the following grounds: performance of a contract (Art. 31 revFADP and Art. 6(1)(b) GDPR), compliance with legal obligations (Art. 6(1)(c) GDPR), legitimate interests in secure and stable operation (Art. 6(1)(f) GDPR) and – for analytics services – your consent (Art. 6(1)(a) GDPR).

5. Orders and payment processing

To process your order we handle the necessary order and payment data. Payments are processed by Payrexx AG, Burgstrasse 20, 3600 Thun, Switzerland. When you proceed to payment we transmit your first name and surname, your email address, the order amount and a reference to your order; you enter the payment details themselves directly with Payrexx or with the respective payment provider. We never receive or store full credit card numbers.

6. Shipping

For delivery we use Swiss Post Ltd, Wankdorfallee 4, 3030 Bern, Switzerland. We transmit the data required for delivery: name, delivery address and – if provided – telephone number and email address for shipment notifications. The shipping label generated in the process is stored in our file storage (see section 10).

7. Accounting and ERP

For invoicing and accounting we use bexio AG, Alte Jonastrasse 24, 8640 Rapperswil-Jona, Switzerland. Name, email address, postal address and the order and invoice line items are transmitted, to the extent required to create and legally retain invoices.

8. Sending emails

Order confirmations and other transactional emails are sent through Plus Five Five, Inc. ("Resend"), 2261 Market Street, San Francisco, CA 94114, USA. For this purpose your email address, your name and the content of the respective message – in the case of an order confirmation therefore also the items ordered, the amounts and your delivery address – are transmitted to this provider. Resend is a company established in the USA and also uses US sub-processors for this purpose, so the transmission constitutes a disclosure abroad.

Resend retains the email and log data for 30 days in the USA and deletes it afterwards. The transfer to the USA is based on the EU Standard Contractual Clauses in the version adapted for Switzerland; the competent supervisory authority for this transfer is the Swiss Federal Data Protection and Information Commissioner (FDPIC). See also section 14.

9. Shop system and data storage

The online shop runs on the Medusa e-commerce platform. Your order, address and communication data is stored in its database. The servers required for this – application, database and cache – are operated by a hosting service provider on our behalf and under a data processing agreement; it processes your data solely on our instructions and not for its own purposes. The servers used for this are located in the Netherlands.

10. File storage

Product images and the shipping labels generated during dispatch preparation are stored with Backblaze, Inc. (the "B2" cloud storage service). The storage location we selected is the EU Central region, with its data centre in Amsterdam, the Netherlands. The shipping labels contain the recipient's name and delivery address.

11. Delivery of the website

The website (frontend) is delivered via Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. Pages are served from the provider's European locations; individual requests – in particular the redirect from the home page to your language version – are processed on a server in the USA. In the process technical connection data arises, in particular IP address, date and time, browser and device information, referrer and pages visited (server logs). Order and customer data is not stored there.

Requests to our shop interface (api.scheroh.ch) pass through Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA, which acts as an upstream network service securing the connection and protecting it against overload and attacks. Connections are terminated at the provider's European locations.

Both providers are certified under the Swiss-U.S. Data Privacy Framework, so transfers to the USA benefit from an adequate level of data protection (see section 14).

12. Cookies

Our website uses cookies to provide the shop technically, to store settings and the shopping cart, to increase security and – with your consent – to compile statistics. Details of the individual cookies and their storage periods can be found in our cookie policy. You can manage cookies at any time via your browser settings or via our cookie banner.

13. Analytics services (Google Analytics 4)

Where you have given your consent, we use Google Analytics 4 via Google Tag Manager in order to evaluate the use of our shop and improve our offering. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (for users in the EEA) and Google LLC (USA) respectively.

We operate Google Analytics in Google Consent Mode v2 with the default setting "denied": without your consent no analytics cookies are set and no data is transmitted to Google – not even cookieless signals (no modeling). Analytics data is only collected after you consent in the cookie banner. The page address transmitted in our measurement is truncated so that the order number on the confirmation page is not sent along. We have concluded a data processing agreement with Google (Google Ads/Analytics Data Processing Terms). Data may be transferred to the USA in this context; appropriate safeguards are in place for this (see section 14).

We do not currently use marketing or advertising tags (e.g. advertising services of social networks). Should such services be added in future, they will be used exclusively with your prior consent, and this privacy policy will be supplemented accordingly.

You can change or withdraw your consent at any time with effect for the future:

14. Disclosure abroad

We use service providers that process personal data outside Switzerland. The following states are concerned:

  • Netherlands – hosting provider: operation of the shop database (order, address and communication data),
  • Netherlands – Backblaze, Inc. (EU Central region): file storage for product images and shipping labels,
  • USA – Plus Five Five, Inc. ("Resend"): sending transactional emails,
  • USA – Vercel Inc.: delivery of the website and server logs,
  • USA – Cloudflare, Inc.: network protection of the shop interface,
  • Ireland and USA – Google Ireland Ltd. and Google LLC respectively: analytics, only with your consent.

The Netherlands provides an adequate level of data protection within the meaning of Art. 16(1) revFADP (Annex 1 to the Data Protection Ordinance).

The following applies to transfers to the USA:

  • Vercel Inc., Cloudflare, Inc. and Backblaze, Inc. are certified under the Swiss-U.S. Data Privacy Framework. Transfers to these recipients therefore benefit from an adequate level of data protection under Art. 16(1) revFADP in conjunction with Annex 1 to the Data Protection Ordinance.
  • Plus Five Five, Inc. ("Resend") is not certified under that framework. This transfer is therefore based on the EU Standard Contractual Clauses in the version adapted for Switzerland; under the agreement concluded with Resend, the Swiss Federal Data Protection and Information Commissioner (FDPIC) is the competent supervisory authority for transfers subject to the Swiss Data Protection Act.
  • For Google, the Google Ads/Analytics Data Processing Terms apply in addition.

15. Retention periods

We store personal data only for as long as is necessary for the respective purposes or required by law. In detail:

  • order and invoice data: 10 years (statutory retention period, Art. 958f CO),
  • email and delivery logs held by the email service provider: 30 days,
  • server logs: for as long as is necessary to maintain operational security,
  • consent settings: until withdrawn or until the respective cookie expires.

The data is then deleted or anonymised.

16. Data security

We take appropriate technical and organisational security measures to protect your personal data, in particular SSL/TLS encryption of data transmission, access restrictions and data backups.

17. Your rights

Where provided for by law, you have in particular the following rights:

  • access to the data we hold about you,
  • rectification of inaccurate data,
  • erasure of personal data,
  • restriction of processing,
  • objection to certain processing operations,
  • data portability,
  • withdrawal of a consent you have given,
  • lodging a complaint with the competent data protection authority.

To exercise your rights, please contact info@scheroh.ch.

18. Right to lodge a complaint

You may contact the competent supervisory authority: in Switzerland the Federal Data Protection and Information Commissioner (FDPIC).

19. Minors

Our offering is generally aimed at persons of legal age. Persons under the age of 16 should only submit personal data with the consent of their legal guardians.

20. Changes to this privacy policy

We reserve the right to amend this privacy policy at any time in order to adapt it to legal requirements or changes to our offering. The current version published on our website applies in each case.