Free shipping over CHF 79.00

TWINTPostFinance PayMastercardVisa
SCHEROH

Privacy policy

Last updated: October 12, 2026

Protecting your personal data is important to Swiss Trend Trade GmbH. In this privacy policy we inform you which personal data we collect in connection with the use of our Scheroh online shop, how we process it and what rights you have. Processing takes place in accordance with the Swiss Data Protection Act (revFADP).

1. Controller

The controller responsible for the processing is:

Swiss Trend Trade GmbH
Brand: Scheroh
Bahnhofstrasse 15
Wangen
Schwyz
8855
Switzerland

Email: info@scheroh.ch
Website: scheroh.ch

2. What data we process and how we collect it

We process personal data that you provide yourself when placing an order or contacting us, as well as technical data that arises when you visit the website:

  • first name and surname,
  • delivery address, which also serves as the billing address (street, address supplement, postcode, town, country),
  • email address (required),
  • order and invoice data (items ordered, amounts, order number, chosen language),
  • payment information (processed by the payment service provider, see section 5),
  • communication data, such as your enquiries to us and our replies,
  • technical data such as IP address, date and time, browser and device data, referrer and pages visited, as well as error and monitoring data of the shop server (see section 9),
  • your cookie consent settings.

This is how we collect this data:

  • through the order form at checkout when you place an order,
  • when you contact us by email, for example with an enquiry, a return or a damage report,
  • through the contact form on our contact page,
  • from our service providers: from Payrexx the confirmation that payment was made (without card details), from Swiss Post the tracking number of your parcel,
  • automatically when you visit the website: server logs and the cookieless counting of page views, scroll depth and banner answers, unless you object to it (see section 11), monitoring data of the shop server (see section 9) and cookies (see section 12),
  • only with your consent to analytics cookies: usage data via Google Analytics, which we integrate through Google Tag Manager (see section 13),
  • only with your consent to marketing cookies: usage and purchase data via the Meta Pixel, which we also integrate through Google Tag Manager, and via the Meta Conversions API (see section 14). We do not use any other tracking pixels or advertising tags.

We do not operate customer accounts: orders can only be placed as a guest, and our shop has no login or registration. We do not currently send a newsletter. We do not collect sensitive personal data within the meaning of Art. 5(c) revFADP, such as health data.

3. Purposes of processing

  • processing and shipping of orders,
  • payment processing,
  • customer service and communication,
  • handling cancellations, returns, parcel enquiries and damage reports as well as warranty claims,
  • invoicing and accounting,
  • fraud prevention, operational security and the stability of our systems,
  • analysis and improvement of our offering with Google Analytics (only with your consent),
  • counting page views, scroll depth on product pages and answers to the cookie banner, without cookies, only as totals and only unless you object (see section 11),
  • measuring and optimising our advertising on Facebook and Instagram and building advertising audiences (only with your consent),
  • compliance with legal obligations.

We do not make automated individual decisions within the meaning of Art. 21 revFADP.

4. Applicable law and legal bases

We process personal data in accordance with the Swiss Data Protection Act (revFADP). We deliver exclusively within Switzerland and do not direct our offering at people in the EU; the EU General Data Protection Regulation (GDPR) therefore does not generally apply to our shop. Where it does apply in an individual case, we comply with it as well, and you have the rights it provides (see section 19).

We process your data in particular to perform the contract with you (Art. 31(2)(a) revFADP), to comply with legal obligations, on the basis of our legitimate interest in secure and stable operation and – for Google Analytics and Meta's advertising services – with your consent (see sections 13 and 14). Where the GDPR applies, we rely accordingly on Art. 6(1)(b), (c), (f) and (a) GDPR. We base the cookieless counting (section 11) on our legitimate interest in improving our offering and the cookie banner, and on the fact that we process this data for statistics only (Art. 31(2)(e) revFADP); it gives us only totals that relate to no person, and you can object to it at any time.

5. Orders and payment processing

To process your order we handle the necessary order and payment data. Payments are processed by Payrexx AG, Burgstrasse 20, 3600 Thun, Switzerland. When you proceed to payment we transmit your email address, the order amount and a reference to your order; you enter the payment details themselves directly with Payrexx or with the respective payment provider. According to Payrexx, it stores the payment and transaction data on servers in Germany (see section 16). Where Payrexx and the payment providers process data for their own purposes (for example fraud prevention), they are responsible for this themselves, and their own privacy notices apply. We never receive or store full credit card numbers.

6. Shipping

For delivery we use Swiss Post Ltd, Wankdorfallee 4, 3030 Bern, Switzerland. We transmit your name and delivery address as well as your email address for shipment notifications and questions about the delivery. The shipping label generated in the process is stored in our file storage (see section 10). If we provide the return label for a return, we transmit your name and address to Swiss Post to create the label. For a parcel enquiry or a damage report, we transmit to Swiss Post the tracking number, your details of the case and the photos you sent us for it.

At checkout we also use Swiss Post's address service so that parcels do not fail because of an incorrect address. While you enter the postal code, city, street and house number, we send what you have typed so far to Swiss Post and show you its suggestions. As soon as you submit the order, we have Swiss Post check your delivery address together with your name; we store the result with your shopping cart and carry it over to the order. Both also happen if the order is not ultimately placed.

7. Accounting and ERP

For invoicing and accounting we use bexio AG, Alte Jonastrasse 24, 8640 Rapperswil-Jona, Switzerland. Name, email address, postal address and the order and invoice line items are transmitted, to the extent required to create and legally retain invoices.

8. Sending emails and our mailbox

Order confirmations and other transactional emails are sent through Plus Five Five, Inc. ("Resend"), 2261 Market Street, San Francisco, CA 94114, USA. For this purpose your email address, your name and the content of the respective message – in the case of an order confirmation therefore also the items ordered, the amounts, your delivery address and the tracking number with the tracking link – are transmitted to this provider. Resend is a company established in the USA and also uses US sub-processors for this purpose, so the transmission constitutes a disclosure abroad.

Resend retains the email and log data for 30 days in the USA and deletes it afterwards. The transfer to the USA is based on the EU Standard Contractual Clauses in the version adapted for Switzerland; the competent supervisory authority for this transfer is the Swiss Federal Data Protection and Information Commissioner (FDPIC). See also section 16.

Messages you send through the contact form on our contact page are likewise forwarded through Resend to our mailbox info@scheroh.ch. Your email address, the topic you chose, your message and, if you provide them, your name and order number are transmitted; the same applies to these data as described above. We do not send you a copy of the message. To prevent the form from being abused for mass sending, we limit the number of messages per sender; for this purpose your IP address is held briefly in the server's working memory, is not written to a database or file and is not transmitted with the message.

Emails you send to info@scheroh.ch – such as enquiries and return or damage reports with photos – and our replies are stored in our mailbox at GoDaddy Operating Company, LLC, USA. The servers through which the mailbox is accessed are located in France (Strasbourg); according to its own list, GoDaddy uses sub-processors in France, the Netherlands, Germany and the USA, among others. GoDaddy is certified under the Swiss-U.S. Data Privacy Framework. See also section 16.

9. Shop system, data storage and error analysis

The online shop runs on the Medusa e-commerce platform. Your order, address and communication data is stored in its database. The servers required for this – application, database and cache – are operated by a hosting service provider on our behalf and under a data processing agreement; it processes your data solely on our instructions and not for its own purposes. The servers used for this are located in the Netherlands.

To detect and fix malfunctions and errors of the shop server – in particular in the order and payment process – the shop server records technical data on the handling of individual requests, log messages and measurements and transmits them to the Grafana Cloud service of Raintank Inc. ("Grafana Labs"), 165 Broadway, 23rd Floor, New York, NY 10006, USA. The data is stored on the provider's servers in the USA.

In particular, the following are recorded: your IP address and browser identifier, the date, time and duration of a request, the address of the shop interface that was called (depending on the request, it contains the internal identifier of your cart or order), status and error codes, error messages (which in individual cases may contain details from the request concerned), internal identifiers of the cart, order, payment and shipment, including the tracking number, a random session identifier that your browser sends until you close the tab (see the cookie policy), as well as the shop server's queries to its database; these may contain details from your order such as your name, address and telephone number. Email addresses are made unrecognisable before transmission. This processing is based on our legitimate interest in secure and stable operation and takes place regardless of your cookie settings. Grafana Labs is certified under the Swiss-U.S. Data Privacy Framework (see section 16); the retention periods are set out in section 17.

10. File storage

Product images and the shipping labels generated during dispatch preparation are stored with Backblaze, Inc. (the "B2" cloud storage service). The storage location we selected is the EU Central region, with its data centre in Amsterdam, the Netherlands. The shipping labels contain the recipient's name and delivery address. Backblaze is a company established in the USA; account and administrative data may therefore also be processed in the USA.

11. Delivery of the website

The website (frontend) is delivered via Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. Each time you open a page, it is generated on the provider's servers in Frankfurt am Main, Germany; connections are received at the provider's European locations. In the process technical connection data arises, in particular IP address, date and time, browser and device information, referrer, pages visited and the cookies sent by your browser (server logs). Vercel is a company established in the USA; log and administrative data may therefore also be processed in the USA.

We also use Vercel Web Analytics to count how often our pages are viewed, how far visitors scroll down a product page (25, 50, 75 and 100% of the page, each with the product's item number) and how visitors answer the cookie banner (banner shown; allowed: all categories or analytics only; first answer or later change). This service sets no cookies and stores nothing in your browser. It receives the page viewed, the referrer, country or region, browser, operating system and device type; the website removes extra details from the address, such as order or cart numbers and search terms, before the data leaves your browser. To count visits, Vercel derives a hash from the request, which it discards after 24 hours. Vercel processes this data on our behalf; we receive only totals that cannot be linked to any person.

You can object to this counting at any time: choose "Reject all" in the cookie banner, or save the cookie settings with analytics cookies switched off. From then on your browser sends no more data to Vercel Web Analytics, not even your answer to the banner. Your choice is stored in the necessary cookie stt_cookie_consent (see cookie policy). As long as you have not answered the banner, the counting runs. You can change your choice at any time:

The details you enter in the order form are not processed on Vercel's servers: they are passed through the provider's network directly to our shop interface (api.scheroh.ch). Requests to this interface pass through Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA, which acts as an upstream network service securing the connection and protecting it against overload and attacks. Connections are received at the provider's European locations.

Both providers are certified under the Swiss-U.S. Data Privacy Framework, so transfers to the USA benefit from an adequate level of data protection (see section 16).

12. Cookies

Our website uses cookies to provide the shop technically, to store settings and the shopping cart, to increase security and – with your consent – to compile statistics and measure the effectiveness of our advertising. Details of the individual cookies and their storage periods can be found in our cookie policy. You can manage cookies at any time via your browser settings or via our cookie banner. In addition, the website stores a random session identifier in your browser's session storage, which is used solely to analyse errors of the shop server (see section 9). With your consent to analytics cookies, the website also remembers there the number of an order you have placed, so that the purchase is counted only once in Google Analytics (see the cookie policy). With your consent to marketing cookies, the Meta Pixel also sets the cookies _fbp and _fbc (see section 14 and the cookie policy). The website also creates a technical cache in your browser's database (IndexedDB), which currently contains no personal data (see the cookie policy).

13. Analytics services (Google Analytics 4)

Where you have given your consent, we use Google Analytics 4 via Google Tag Manager in order to evaluate the use of our shop and improve our offering. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (for users in Switzerland and the EEA) and Google LLC (USA) respectively.

We operate Google Analytics in Google Consent Mode v2 with the default setting "denied". When you open a page, your browser only loads the Google Tag Manager program file from Google's servers; in the process Google receives, for technical reasons, your IP address, your browser details and the address of our website, but not the specific page you opened. Without your consent Google Analytics sets no cookies and collects no data – not even cookieless signals (no modeling). Google Analytics only collects data after you consent in the cookie banner; the retention periods are set out in section 17. We have concluded a data processing agreement with Google (Google Ads/Analytics Data Processing Terms). Data may be transferred to the USA in this context; appropriate safeguards are in place for this (see section 16).

Google explains how it uses data from sites that use its services at policies.google.com/technologies/partner-sites.

You can change or withdraw your consent at any time with effect for the future. If you withdraw your consent, we delete the Google Analytics cookies and reload the page; from then on Google Analytics collects no data. This also ends the cookieless counting (section 11):

14. Advertising services (Meta Pixel and Conversions API)

Where you have consented to marketing cookies in the cookie banner, we use the Meta Pixel and the Meta Conversions API. The provider is Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, D04 X2K5, Ireland; its parent company is Meta Platforms, Inc., USA. We use these services to measure the effectiveness of our ads on Facebook and Instagram, to attribute purchases to our ads, to build advertising audiences (for example to show ads to people who have viewed products in our shop) and to optimise the delivery of our ads. The "Marketing" category is not preselected in the cookie banner. Without your consent to marketing cookies, the Meta Pixel is not loaded and we do not transmit any data to Meta.

We integrate the Meta Pixel through Google Tag Manager; it is only loaded after you have consented to marketing cookies. Your browser then transmits page views and the shop events "product viewed", "added to cart", "checkout started" and "payment info added" to Meta, each with product identifiers (SKUs), quantities, prices, currency and product category. In the process Meta also receives the address of the page you opened, your IP address, browser and device details and Meta's cookies (see the cookie policy). We have deactivated Meta's automatic event detection (automatic evaluation of button clicks and page metadata). The Meta Pixel does not run on the order confirmation or on the page you return to after payment, because their addresses contain your order or cart number.

If you consented to marketing cookies when placing your order, our shop server additionally transmits the completed purchase directly to Meta (Meta Conversions API). The following are transmitted: the internal identifier of your order, the order value and currency, product identifiers, quantities and prices, the time of the purchase, the address of the checkout page, your IP address and browser identifier (user agent), the values of the cookies _fbp and _fbc, and your delivery country in hashed form (SHA-256). We do not transmit your name, email address, telephone number or street address to Meta. So that the shop server can transmit the purchase, it stores your IP address, your browser identifier and the values of _fbp and _fbc temporarily with your order and deletes them from it as soon as the purchase has been transmitted to Meta or it is clear that it will not be transmitted. Without your consent to marketing cookies, we do not transmit any purchase data to Meta.

If you have consented to marketing cookies, our shop server also transmits every addition of a product to the cart directly to Meta (Meta Conversions API): the product identifier, quantity, price and currency, the time, the address of the page on which you added the product, your IP address and browser identifier (user agent), the values of the cookies _fbp and _fbc, and the delivery country of your cart in hashed form (SHA-256). This event carries the same random identifier as the corresponding Meta Pixel event, so that Meta counts it only once. The shop server stores nothing for this: the data is transmitted directly from your browser's request.

The legal basis for using the Meta Pixel and the Conversions API is solely your consent (Art. 31(1) revFADP); we do not rely on an overriding interest for this processing. Where the GDPR applies, we rely on Art. 6(1)(a) GDPR and – for storing information on your device and accessing it – on Art. 5(3) of the ePrivacy Directive (2002/58/EC) as implemented in the respective national law.

We and Meta Platforms Ireland Ltd. are jointly responsible (joint controllers) for collecting your data via the Meta Pixel and the Conversions API and transmitting it to Meta (cf. judgment of the Court of Justice of the European Union C-40/17, "Fashion ID"). Meta's agreement on joint controllership (the "Controller Addendum") applies to this joint responsibility. You can exercise your rights with regard to this joint processing both against us and against Meta. Meta alone is responsible for the subsequent processing of the transmitted data; Meta's privacy policy at facebook.com/privacy/policy applies to it and also governs how long Meta retains data. In your ad preferences at Meta, at facebook.com/adpreferences, you can see and limit how Meta shows you ads and object to Meta using your data for advertising.

Meta Platforms Ireland Ltd. may transfer data to Meta Platforms, Inc. in the USA. Meta Platforms, Inc. is certified under the EU-U.S. Data Privacy Framework and the Swiss-U.S. Data Privacy Framework; in addition, standard contractual clauses are in place (see section 16). The storage periods of the cookies and of the data stored temporarily with your order are set out in section 17.

You can change or withdraw your consent at any time with effect for the future. If you withdraw your consent, we delete the cookies _fbp and _fbc and reload the page; from then on no more data is transmitted to Meta:

15. No sale of your data, advertising only with your consent

We do not sell or rent your personal data. We pass data on for advertising purposes only to Meta, and only if you have consented to marketing cookies (see section 14). Otherwise, your data is received only by the recipients named in this privacy policy and their sub-processors, and only to the extent required for the respective purpose. Service providers that process data on our behalf are contractually bound by our instructions.

We use your data for personalised advertising only with your consent to marketing cookies, namely for advertising on Facebook and Instagram through Meta (see section 14). We do not use any other marketing, advertising or remarketing tags. Google Signals is deactivated, and our analytics account is not linked to any advertising account. The Google Consent Mode signals for advertising cookies, advertising user data and personalised ads (ad_storage, ad_user_data, ad_personalization) are set to "denied" by default and follow your choice for marketing cookies; your consent to marketing cookies activates only Meta's services, not Google's advertising services. Should further advertising services be added in future, we will use them exclusively with your prior consent and supplement this privacy policy accordingly.

The California Consumer Privacy Act (CCPA/CPRA) does not apply to our shop, as we deliver exclusively within Switzerland. Regardless of this, we do not sell personal information; we transmit data for advertising purposes only to Meta and only with your consent (see section 14).

16. Disclosure abroad

We use service providers and – with your consent – disclose data to Meta; they process personal data outside Switzerland. The following states are concerned:

  • Netherlands – hosting provider: operation of the shop database (order, address and communication data),
  • Netherlands and USA – Backblaze, Inc.: file storage for product images and shipping labels (EU Central region, Amsterdam); account and administrative data also in the USA,
  • Germany – Payrexx AG: storage of payment and transaction data (according to Payrexx),
  • Germany, other European states and USA – Vercel Inc.: receipt of connections at European locations, generation of the pages in Frankfurt am Main, delivery of the website, server logs and cookieless counting of page views, scroll depth and banner answers (Vercel Web Analytics),
  • USA – Plus Five Five, Inc. ("Resend"): sending transactional emails and forwarding messages from the contact form,
  • France, Netherlands, Germany and USA – GoDaddy Operating Company, LLC: mailbox info@scheroh.ch (enquiries, return and damage reports),
  • European states and USA – Cloudflare, Inc.: receipt of connections at European locations and network protection of the shop interface,
  • USA – Raintank Inc. ("Grafana Labs"): technical monitoring and error analysis of the shop server,
  • Ireland and USA – Google Ireland Ltd. and Google LLC respectively: analytics, only with your consent; independently of this, when Google Tag Manager is loaded, Google receives, for technical reasons, your IP address, your browser details and the address of our website (see section 13),
  • Ireland and USA – Meta Platforms Ireland Ltd. and Meta Platforms, Inc. respectively: measuring and optimising our advertising on Facebook and Instagram, only with your consent to marketing cookies (see section 14).

The Netherlands, Germany, France and Ireland provide an adequate level of data protection within the meaning of Art. 16(1) revFADP (Annex 1 to the Data Protection Ordinance).

The following applies to transfers to the USA:

  • Vercel Inc., Cloudflare, Inc., Backblaze, Inc., GoDaddy Operating Company, LLC and Raintank Inc. ("Grafana Labs") are certified under the Swiss-U.S. Data Privacy Framework. Transfers to these recipients therefore benefit from an adequate level of data protection under Art. 16(1) revFADP in conjunction with Annex 1 to the Data Protection Ordinance.
  • Plus Five Five, Inc. ("Resend") is not certified under that framework. This transfer is therefore based on the EU Standard Contractual Clauses in the version adapted for Switzerland; under the agreement concluded with Resend, the Swiss Federal Data Protection and Information Commissioner (FDPIC) is the competent supervisory authority for transfers subject to the Swiss Data Protection Act.
  • Meta Platforms, Inc. is certified under the EU-U.S. Data Privacy Framework and the Swiss-U.S. Data Privacy Framework, so these transfers benefit from an adequate level of data protection under Art. 16(1) revFADP in conjunction with Annex 1 to the Data Protection Ordinance. In addition, standard contractual clauses are in place for these transfers.
  • For Google, the Google Ads/Analytics Data Processing Terms apply in addition.

17. Retention periods

We store personal data only for as long as is necessary for the respective purposes or required by law. In detail:

  • order and invoice data: 10 years (statutory retention period, Art. 958f CO),
  • email and delivery logs held by the email service provider: 30 days,
  • analytics data in Google Analytics: event-level data 2 months, user-level data 14 months after your last visit; aggregated reports without personal reference are kept. The analytics cookies expire after 2 years at most (see cookie policy),
  • server logs at Vercel: 1 day; extracts without IP addresses (time, address requested, browser identifier) that we evaluate to monitor search engine access, for as long as is necessary for this purpose,
  • Vercel Web Analytics: hash used to count visits, 24 hours; the totals contain no personal data,
  • monitoring data of the shop server at Grafana Labs: until the retention period set with the provider expires,
  • Meta cookies (_fbp, _fbc): 90 days (see cookie policy); data transmitted to Meta: in accordance with Meta's terms (see section 14),
  • IP address, browser identifier and values of _fbp and _fbc stored with your order: until the purchase has been transmitted to Meta or it is clear that it will not be transmitted (see section 14),
  • consent settings: until withdrawn or until the respective cookie expires.

The data is then deleted or anonymised.

18. Data security

We take appropriate technical and organisational security measures to protect your personal data, in particular SSL/TLS encryption of data transmission, access restrictions and data backups. However, no transmission over the internet is ever completely secure, so we cannot guarantee absolute security.

19. Your rights

Where provided for by law, you have in particular the following rights:

  • access to the data we hold about you,
  • rectification of inaccurate data,
  • erasure of personal data,
  • restriction of processing,
  • objection to certain processing operations,
  • data portability,
  • withdrawal of a consent you have given,
  • lodging a complaint with the competent data protection authority.

How to exercise your rights: write to info@scheroh.ch or to our postal address (see section 24). Please state the email address you used for your order and, if possible, the order number. If there is doubt about your identity, we may ask for further details before we provide information or delete data. We reply within 30 days; access to your data is generally free of charge. If we refuse a request in whole or in part, we will tell you the reasons. We must retain order and invoice data for the statutory period of 10 years (Art. 958f CO); at your request we will use it only for that purpose until then and delete it once the period has expired. You can withdraw your consent to analytics and marketing cookies yourself at any time via the cookie settings (see sections 13 and 14); there you can also object to the cookieless counting (see section 11).

20. Right to lodge a complaint

You may contact the competent supervisory authority: in Switzerland the Federal Data Protection and Information Commissioner (FDPIC).

21. Minors

Our offering is generally aimed at persons of legal age. Persons under the age of 16 should only submit personal data with the consent of their legal guardians.

22. Links to other websites

Our website contains links to third-party offerings, such as our profiles on Instagram, Threads, TikTok and Facebook; our emails contain the Swiss Post tracking link. These are plain links, not embedded content or plugins: the links themselves do not transmit any data to these providers when you visit our website; only when you click a link are you taken to the respective provider's website. That provider is responsible for the processing of your data there, and its privacy policy applies. The Meta Pixel is separate from this: if you have consented to marketing cookies, Meta, the operator of Facebook and Instagram, receives data about your visit and your purchases in our shop (see section 14).

23. Changes to this privacy policy

We reserve the right to amend this privacy policy at any time in order to adapt it to legal requirements or changes to our offering. We publish the current version on this page; the date at the top ("Last updated") shows when it was last changed. The current version published on our website applies in each case.

24. Contact for privacy enquiries

For questions about data protection and to exercise your rights, you can reach us at:

Swiss Trend Trade GmbH
Bahnhofstrasse 15, Wangen, Schwyz, 8855, Switzerland
Email: info@scheroh.ch