Legal

Privacy Policy

Last updated: July 2026

1. Data Controller

The entity responsible for processing your personal data within the meaning of the revised Swiss Federal Act on Data Protection (revDSG) is:

Studio maley GmbH
Zurlindenstrasse 57
8003 Zurich
Switzerland

UID: CHE-325.613.640
Email: shop@maley.ch

For any questions regarding data protection and to exercise your rights, you can contact us at any time at the email address above.

2. Scope and Principles

This Privacy Policy explains how we process your personal data when you visit our website www.maley.ch, place a reservation through our website, sign up for our newsletter, or contact us.

We process your personal data in accordance with Swiss data protection law, in particular the revised Federal Act on Data Protection (revDSG) and its associated ordinance. In doing so, we observe the principles of good faith, proportionality, purpose limitation, and data security.

3. Personal Data We Process

Depending on how you interact with us, we process the following categories of personal data:

Reservation data. When you reserve a product through our website, we collect the information you enter in the reservation form – typically your name, email address, possibly your phone number, and details of the reserved product (name, variant, quantity).

Contact data. When you write to us by email or through a contact form, we process the information you provide (e.g. name, email address, and the content of your message).

Newsletter data. When you sign up for our newsletter, we process your email address and, where applicable, your name.

Automatically collected data. When you visit our website, certain data is automatically collected for technical reasons and stored in server log files, such as the IP address, date and time of access, pages visited, browser and operating system used, and the referring page. This data serves security, technical operation, and the improvement of our offering.

Providing your personal data is generally voluntary. However, without certain information (e.g. your name and email address for a reservation), we cannot process a reservation or enquiry.

4. Purposes of Processing

We process your personal data for the following purposes:

receiving, managing, and confirming your reservation, and contacting you in connection with in-store collection;
responding to your enquiries and communicating with you;
sending our newsletter, provided you have signed up for it;
operating, securing, maintaining, and improving our website;
fulfilling legal obligations (e.g. commercial and tax retention requirements);
protecting our legitimate interests, in particular asserting or defending against legal claims.

5. Cookies and Usage Analysis

Our website uses cookies and similar technologies. Cookies are small text files stored on your device. Some of them are technically necessary for the website and functions such as the reservation to work correctly. These necessary cookies cannot be disabled without limiting the functionality of the website.

Our website is operated via the e-commerce platform Shopify (see Section 6). Shopify sets technically necessary cookies as well as – depending on the configuration – cookies for analysing website usage so that we can improve our offering. We do not currently use any further analytics or tracking services.

You can set your browser to block or delete cookies. In addition, we inform you about cookies via a cookie notice when you visit our website and, where required, obtain your consent for non-essential cookies. You can withdraw any consent given at any time with effect for the future.

6. Hosting and Processors

Our website, the reservation process, and the newsletter distribution are operated via the e-commerce platform Shopify (Shopify International Limited or Shopify Inc.). Shopify processes the data arising in connection with our website on our behalf as a processor and is contractually bound to confidentiality and compliance with data protection.

We only disclose your personal data to third parties where this is necessary to provide our services, where you have consented, or where we are legally required to do so.

7. Disclosure of Data Abroad

As we use Shopify to operate our website and newsletter, personal data may also be processed outside Switzerland, in particular in countries of the EU/EEA and potentially in third countries such as Canada and the USA.

Disclosure only takes place where the country concerned provides adequate data protection (according to the list issued by the Federal Council) or where adequate protection is ensured by other means, in particular through contractual guarantees such as the Standard Contractual Clauses. On request, we will gladly provide you with further information about the safeguards in place.

8. Retention Period

We retain your personal data only for as long as necessary for the respective purposes or as required by statutory retention obligations.

Reservation data: We retain this for the duration of the reservation and beyond, for as long as needed for processing, possible follow-up questions, and legal obligations. Reservation data that is no longer required is then deleted (generally after 12 months).
Contact enquiries: We retain these for as long as it makes sense for processing and any follow-up, and delete them thereafter.
Newsletter data: We retain this until you unsubscribe from the newsletter.
Accounting-relevant data: Where a statutory retention obligation applies (generally 10 years), we retain the relevant data accordingly.

9. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, or alteration. Data transmitted via our website is encrypted (SSL/TLS). However, we cannot guarantee absolute security when transmitting data over the internet.

10. Your Rights

Under the revDSG, you have the following rights in relation to your personal data in particular:

Access: You can request information about whether and which personal data we process about you.
Rectification: You can request the correction of inaccurate personal data.
Deletion: You can request the deletion of your personal data, provided that no statutory retention obligation or other justification applies.
Objection / restriction: You can object to the processing of your personal data or request its restriction.
Data release / data portability: You can request that we release to you certain data you have provided to us in a common electronic format or – where technically possible – transfer it to a third party.
Withdrawal of consent: Where processing is based on your consent (e.g. newsletter), you can withdraw it at any time with effect for the future.

To exercise these rights, a message to shop@maley.ch is sufficient. For security reasons, we may ask you for proof of identity.

If you believe that the processing of your personal data violates data protection law, you may also contact the Swiss Federal Data Protection and Information Commissioner (FDPIC / EDÖB).

11. Newsletter

When you sign up for our newsletter, we use your email address (and possibly your name) to send you information about MALEY, new objects, and events. Distribution takes place via Shopify. Sign-up is based on your consent. You can unsubscribe at any time, either via the unsubscribe link in every newsletter email or by message to shop@maley.ch. After you unsubscribe, we remove your data from the distribution list.

12. Social Media and External Links

Our website and communications may contain links to external platforms (e.g. Instagram). The respective provider is responsible for data processing on these platforms. The provider's own data protection provisions apply. We have no influence over their data processing.

13. Changes to This Privacy Policy

We may amend this Privacy Policy at any time to reflect changes in legal or technical circumstances. The version published on our website applies in each case.

14. Contact

For questions regarding data protection, you can reach us at:

Studio maley GmbH
Zurlindenstrasse 57
8003 Zurich
Email: shop@maley.ch