Privacy policy
SH4 Swiss Hobby Sàrl — Chemin de Plein-Air 1, 1180 Rolle, Switzerland UID: CHE-382.398.058 · E-mail: modelisme@swiss-hobby.ch
Version of 11 September 2026. This policy describes the processing of personal data on shop.swiss-hobby.ch, in accordance with the Swiss Federal Act on Data Protection (FADP, SR 235.1) and its ordinance (DPO).
1. Controller
SH4 Swiss Hobby Sàrl ("Swiss Hobby") is responsible for the processing described here. Any request concerning your data may be addressed to: modelisme@swiss-hobby.ch, or by post to the address above.
2. What data, from where
| Source | Data |
| Customer account | title, name, first name, address, e-mail, password (hashed) |
| Order (with or without account) | billing and delivery addresses, phone, articles ordered |
| Payment | method chosen and status, reported by the provider — never card numbers |
| Requests and e-mails | your correspondence and the contact details used |
| Browsing | technical server logs: IP address, timestamp, page requested |
| Currency suggestion | the IP address is compared locally with a list of country ranges, solely to suggest CHF or EUR; the result is neither stored nor transmitted |
The site can be used without an account; the fields marked as required at checkout are those Swiss Hobby needs to deliver and invoice.
3. Purposes
- Performing the contract: processing the order, collecting payment, delivering, handling warranty and returns.
- Managing the customer account and answering requests.
- Complying with legal obligations, in particular accounting.
- Ensuring the shop's security and preventing abuse.
- Sending the newsletter — only on voluntary subscription, one-click unsubscribe in every issue.
No profiling, no automated decisions, no sale or rental of data. No targeted advertising is carried out.
4. Cookies
On its own, the shop only sets cookies that are strictly necessary for it to work:
| Cookie | Role | Duration |
| `session-` | browsing session and cart | session |
| `sw-cache-hash` / `sw-states` | serving the right page version (language, currency) | session |
| `timezone` | time display | session |
Two convenience cookies are set only at your request, when you click:
| Cookie | Role | Duration |
| `youtube-video` | playing YouTube videos | 30 days |
| `wishlist-enabled` | wish list without a customer account | 30 days |
Nothing is loaded from YouTube before you click; afterwards the player is served by Google, which receives your IP address. The wish list stays in your browser.
No advertising cookies, no audience measurement. That is why the shop shows no consent banner: there is nothing to consent to. Should an analytics tool ever be added, a banner would ask for your consent before any cookie is set.
You can refuse or delete cookies at any time in your browser settings. Without the session cookie, the cart and checkout do not work.
5. Who receives data
Only the providers needed to fulfil the order:
- Swiss Post (or the chosen carrier): name and delivery address;
- payment providers (depending on the method chosen, e.g. Shopware Payments, PayPal): amount and order reference — payment takes place on their systems, under their own privacy policy;
- hosting: Amazon Web Services infrastructure, Frankfurt region (Germany); catalogue images are served by the CloudFront network.
Swiss Hobby transmits no data for other purposes, except under a legal obligation (Swiss authority or court).
6. Where the data is (transfers abroad)
The data is stored in the European Union (Germany), whose level of protection is recognised as adequate by the Federal Council (annex 1 DPO). No transfer to countries without adequate protection takes place; where a payment provider processes data outside these territories, it does so under its own legal safeguards.
7. How long
| Data | Duration |
| Orders, invoices, commercial correspondence | 10 years (art. 958f CO) |
| Customer account | until deleted by the customer |
| Newsletter | until unsubscribed |
| Technical logs | 30 days at most |
| Guest visitor cart | a few days |
8. Security
TLS encryption of all exchanges, access restricted to those who need it, certified data centres, encrypted backups, hashed passwords.
9. Your rights (art. 25 ff. FADP)
You may request at any time:
- access to your data (including a copy);
- their rectification;
- their erasure — subject to statutory retention periods;
- the delivery of your data in a common format;
- objection to a processing operation.
Response within 30 days; proof of identity may be requested to avoid disclosure to third parties. In the event of disagreement, you may lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Berne — www.edoeb.admin.ch.
10. Minors
The shop is aimed at adults. Orders by minors require the consent of their legal representative.
11. External links
The shop may contain links to third-party sites (manufacturers, payment providers); their content and processing are the responsibility of their operators.
12. Changes
This policy may be adapted at any time, in particular as the shop evolves. The version published on the shop prevails; substantial changes are announced on the home page.