Privacy policy

The controller for data processing on this website is Kaanela — Matthias Rötzer (sole proprietorship / Einzelunternehmen), Birkenstrasse 9, 4123 Allschwil, Switzerland, reachable at hello@kaanela.ch.

When you place an order we process the data needed to fulfil it (name, address, email, payment data). When you visit the site, technically necessary data is processed.

For audience measurement we use Umami — cookieless, privacy-friendly analytics. Only aggregate information is recorded: page viewed, referring site, approximate region, device type and browser. No cookies are set, nothing is stored on your device, and no personal profiles are built; returning visits are counted via a technical value that rotates daily and cannot be traced back to you.

To operate the shop we use carefully selected service providers: Stripe (payment processing), Resend (order emails), Vercel (hosting), Supabase (an EU-hosted database for order and product data, admin sign-in and image storage), Notion (internal order overview, which receives your name, email address and shipping address for your order) and Umami (cookieless audience measurement, see the “Analytics” section). Data processing agreements are in place with these providers, and processing occurs only to the extent necessary.

Without your consent we set no tracking or advertising cookies. One technically necessary cookie remembers your country to preset the delivery market and currency. Your bag, market choice, the newsletter prompt and your cookie decision are stored locally in your browser (localStorage). If you arrive via an advertising or campaign link, we additionally remember the campaign identifier and the referring site for the lifetime of the browser tab (sessionStorage), so that an order can be matched to the campaign that produced it; closing the tab deletes this value. If you agree in the cookie notice, the Meta pixel is added (see below).

Only if you agree in the cookie notice do we load the Meta pixel (Meta Platforms Ireland Ltd.). It helps us understand how visitors find the site through our ads and may set cookies for that purpose; data may be transferred to countries outside Switzerland and the EU (in particular the USA). With your consent the pixel reports, alongside page views, shop interactions to Meta: products you view including the displayed price, additions to the bag, the start of checkout, purchases, and a successful newsletter signup (without your email address). When you buy, we additionally send a purchase event to Meta server-side (Conversions API): order value, currency, the purchased items, your email address in hashed form and — where present — the cookie identifiers set by the pixel. What governs this server-side event is your consent at the time of purchase. Without consent the pixel is not loaded and no data is sent to Meta. You can change your decision at any time: open the homepage with ?consent=reset appended and the notice will appear again.

If you sign up for the newsletter, we process your email address to send you the welcome code and occasional news. The code is created via our payment provider Stripe and delivery runs through Resend. You can unsubscribe at any time — a short message to hello@kaanela.ch is enough.

After an order we may send you a personal review link. If you submit a review, we process the details you provide (review text, display name, optionally a location) and publish them on this website together with a note that it comes from a verified purchase. You can request deletion of your review at any time — a short message is enough.

Photos with a review are optional. If you upload any, we automatically remove all metadata during upload — in particular GPS location data, which could otherwise reveal where the photo was taken. We store the photos with our hosting provider Supabase and only publish them after we have approved the review. We log your consent together with the exact wording you agreed to. Any use beyond this website — for example on Instagram or in advertising — only happens if you additionally and separately agreed to it. You can withdraw your consent at any time with future effect; we will then take the photos down.

You have the right to access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to lodge a complaint with a supervisory authority.