Privacy policy
Last updated: 16 August 2026
This text is a translation. Only the German version is legally binding.
Protecting your personal data matters to us. In this privacy policy we explain which personal data we process in connection with our online shop Ciao Ciao Bella, where it comes from, what we use it for, who it may be shared with and what rights you have.
Our online shop runs on the e-commerce platform Shopify. Shopify provides the technical infrastructure we use to offer our shop and related services.
This privacy policy applies to the use of our website www.ciaociaobella.ch, to orders in our online shop and to communication with us.
1. Controller
The controller responsible for processing your personal data is:
Ciao Ciao Bella
Owner: Jsabelle Sauter
Windeggstrasse 21
8203 Schaffhausen
Switzerland
Email: hello@ciaociaobella.ch
Website: www.ciaociaobella.ch
If you have questions about data protection or want to exercise your rights, you can contact us at any time at the email address above.
2. What personal data do we process?
Personal data is any information relating to an identified or identifiable natural person.
Which data we process depends on how you use our online shop and interact with us.
The following categories of personal data may in particular be processed:
Contact and address data
In particular:
first and last name
billing address
delivery address
email address
phone number, if provided
Order and transaction data
In particular:
products ordered
shopping cart contents
order history
returns and complaints
payment method
payment status
transaction information
Payment information
To process payments, the necessary information is processed by the payment service providers involved.
Depending on the payment method chosen, this may include payment, card or transaction information.
Ciao Ciao Bella generally only receives the payment information needed to carry out, confirm and match a payment.
Customer account
If you create a customer account or use Shopify's customer features, your contact details, order history, account settings and other information linked to your account may in particular be processed.
Communication
When you contact us, we process the information you send us, for example:
emails
enquiries via a contact form
questions about products or orders
complaints and returns
other correspondence with Ciao Ciao Bella
Technical data
When you visit our online shop, technical information may be processed automatically, for example:
IP address
browser type
device type
operating system
network and connection information
date and time of access
technical identifiers
Usage data
We or the service providers needed to run the shop may process information about how our online shop is used.
This can include, for example, information about pages viewed, cart functions, checkout processes and interactions with our shop.
Newsletter data
If you subscribe to our newsletter, we process in particular your email address and any other information you provide voluntarily. If you voluntarily give us your birthday (day and month only), we use it to wish you a happy birthday and send you a birthday offer. You can have it deleted at any time.
3. Where do we get personal data from?
We may obtain personal data in particular from the following sources:
Directly from you
For example when you:
place an order,
create a customer account,
subscribe to our newsletter,
contact us,
report a return or complaint,
or otherwise provide us with information.
Automatically when you use our shop
Certain technical data is collected automatically when you visit and use our website, for example via cookies and similar technologies.
From service providers
We receive or process information in connection with service providers needed to run our shop, such as Shopify or payment and shipping providers.
4. What do we process personal data for?
We process personal data in particular for the following purposes:
providing and operating our online shop
receiving and processing orders
processing payments
shipping orders
managing customer accounts, where this feature is used
handling returns and complaints
answering customer enquiries
communication relating to orders
preventing fraud and misuse
keeping our online shop secure
meeting legal and regulatory obligations
accounting and business administration
improving our shop and our range
notifying you when a sold-out item is back in stock, if you signed up for this
sending our newsletter, if you subscribed
marketing and advertising, where such features are used and the applicable requirements are met
We only process personal data for purposes related to our business and the services we offer, or as otherwise permitted by law.
5. Shopify
Our online shop runs on the e-commerce platform Shopify.
Shopify provides the technical infrastructure we use to run our shop, offer products, receive orders and use other e-commerce features.
When our shop is used, Shopify may collect and process personal data about access to and use of the shop.
Data you submit via our shop may be passed on to Shopify and to service providers used by Shopify, to the extent necessary to provide, secure, technically operate and develop Shopify's services.
Shopify may also process certain data under its own responsibility, in particular in connection with its own features and services.
Data may also be processed outside Switzerland.
More information about how Shopify processes data and the related rights can be found in Shopify's privacy information.
6. Payment processing
The following payment methods may in particular be offered in our shop:
TWINT
Visa
Mastercard
Apple Pay
Google Pay
The payment methods actually shown to you at checkout apply.
To carry out a payment, the necessary data is transmitted to or processed directly by the payment service providers involved.
Payments are processed via Shopify Payments, Shopify's payment service. For TWINT payments, TWINT AG is also involved.
The payment providers additionally process personal data under their own privacy policies.
We generally only receive the payment information needed to process, confirm and match your payment.
7. Shipping and Swiss Post
We generally ship orders with Swiss Post.
So that your order can be delivered, we pass the necessary personal data on to the shipping provider.
This may in particular include:
name
delivery address
and, where required for the chosen shipping service, email address and phone number.
This data is used to process and deliver your order.
8. Contacting us
When you contact us by email, contact form or any other channel, we process the data you send to answer your enquiry and handle the related communication.
We only keep this information for as long as necessary for your enquiry, our business relationship or because of legal obligations.
You can also write to us on WhatsApp. The WhatsApp button in our shop is a simple link: no data is sent to WhatsApp when you open the page. Only when you tap the button does WhatsApp open with a pre-filled message, which you can edit or discard before sending.
WhatsApp is provided by WhatsApp Ireland Limited (Meta). If you contact us via WhatsApp, WhatsApp processes your phone number, profile name, messages and details such as the time, in line with its own privacy policy. Data may also be transferred to countries outside Switzerland, in particular the USA. Message contents are end-to-end encrypted.
We use WhatsApp Business and only use your details to answer your enquiry. If you'd rather not, simply email us at hello@ciaociaobella.ch.
9. Newsletter and Shopify Email
We use Shopify Email for our newsletter.
If you subscribe to our newsletter, we process your email address and any other information you provide voluntarily to send you news, product information, offers and other information from Ciao Ciao Bella.
You can unsubscribe at any time via the link in our newsletter emails.
Even after unsubscribing, certain data may be kept where necessary to document the unsubscription or because of legal obligations.
Non-promotional messages, such as information about an order, may be sent regardless of a newsletter subscription.
10. Cookies and similar technologies
Our online shop uses cookies and similar technologies.
Some of them are necessary for the shop to work technically.
These may include, for example, functions for:
the shopping cart
checkout
security
customer account
language settings
technical shop functions
In addition, analytics, personalisation or marketing technologies may be used.
Which additional technologies are actually used depends on how our online shop is configured.
Where a choice or consent is required for certain technologies, we provide the corresponding privacy or cookie settings.
11. Analytics, marketing and advertising
Ciao Ciao Bella may use data to improve the online shop and shopping experience and – where set up accordingly and legally permitted – for marketing activities.
At the time of the last update of this privacy policy, it has not yet been finally decided which external analytics and advertising services will be used in addition to the features required for the Shopify shop.
If additional services or technologies are used in future, for example for web analytics, personalised advertising or measuring the success of campaigns, this privacy policy will be updated accordingly.
Where necessary, corresponding consent or settings options will be provided.
12. Social media
Ciao Ciao Bella may run its own presences on social networks and platforms, such as Instagram, Facebook or Pinterest.
If you visit our profiles on such platforms or interact with us there, the platform operator also processes personal data under its own privacy policy.
If features of such platforms are embedded directly in our shop, data may also be transmitted to the respective providers.
We provide information about such embeds where necessary.
13. Sharing of personal data
We only share personal data where necessary to run our shop and provide our services, where required by law or where otherwise permitted.
Recipients may in particular include:
Shopify and service providers used by Shopify
payment service providers
WhatsApp (Meta), if you contact us that way
Swiss Post and, where applicable, other logistics providers
IT, hosting and technical service providers
Shopify Email
accounting and other professional service providers
analytics and marketing providers, if such services are actually used
authorities or other bodies, where there is a legal obligation
We do not sell your personal data as a business model in its own right.
However, certain features provided by Shopify may involve data processing by Shopify or other providers involved. Their privacy information applies in addition to such processing.
14. Third-party websites and services
Our online shop may contain links to websites, social networks or other offerings of third parties.
If you follow such a link, you may leave our area of responsibility.
The data processing, content and security of those third parties are governed by their own privacy policies and terms.
Including a link does not automatically mean that Ciao Ciao Bella controls or endorses all content or privacy practices of the third party.
15. Data processing abroad
Some of our service providers, in particular internationally active technology and payment providers, may process or store personal data outside Switzerland.
Such processing may take place in particular in the countries where the service providers or their subcontractors are located.
Where data is transferred to a country without an adequate level of data protection and this is legally required, appropriate safeguards are put in place. These may include recognised contractual guarantees or other mechanisms provided for under applicable data protection law.
16. Retention of personal data
We only keep personal data for as long as necessary for the purpose of processing or as long as legal retention obligations apply.
How long certain data is stored depends in particular on:
whether it is needed for an ongoing order,
whether a customer account exists,
whether it is needed for our business relationship,
whether legal retention obligations apply,
whether it is needed to establish, exercise or defend legal claims.
Business, contract and accounting records may be kept for several years in line with legal retention obligations.
17. Data security
We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access and other unlawful processing.
To do so, we also work with service providers needed for the secure technical operation of our shop.
Despite appropriate security measures, completely risk-free transmission or storage of data on the internet cannot be guaranteed.
Please therefore don't send us particularly confidential information via unsecured channels.
18. Children's data
Our online shop is not specifically aimed at children.
We do not knowingly collect personal data from children who are not authorised to enter into such transactions on their own.
If, as a parent or legal guardian, you find that a child has sent us personal data without the required consent, you can contact us at hello@ciaociaobella.ch.
We will look into the matter and delete the data concerned where necessary and legally permitted.
19. Your data protection rights
Under applicable data protection law, you can in particular ask whether and which personal data we process about you.
Where the legal requirements are met, you may in particular have the following rights:
access to your personal data
correction of inaccurate personal data
deletion of personal data
release or transfer of certain personal data
objection to certain processing, where provided for by law
withdrawal of consent for future processing, where processing is based on your consent
Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
If you no longer want to receive our newsletter, you can unsubscribe at any time via the link in the email.
You can send data protection requests to:
To protect your data, we may ask for suitable proof of identity before processing a request.
Exercising your data protection rights will not lead to any unjustified disadvantage.
20. Rights of persons in the European Economic Area or the United Kingdom
Where the data protection law of the European Economic Area or the United Kingdom also applies to a particular processing activity, the persons concerned may have additional rights.
These may include in particular the right to restrict certain processing, a broader right to object and other rights under the applicable law.
These rights only apply where the respective legal requirements are met.
21. Complaints
If you have questions or complaints about how we process your personal data, please contact us first at:
You can also contact the competent data protection authority under applicable law.
In Switzerland, the Federal Data Protection and Information Commissioner (FDPIC) is the competent authority.
22. Changes to this privacy policy
We may update this privacy policy if our online shop, the technologies and service providers we use, our data processing or legal requirements change.
The current version is published at www.ciaociaobella.ch.
The date of the last update is shown at the top of this privacy policy.
23. Contact
If you have questions about this privacy policy, the processing of your personal data or exercising your data protection rights, you can reach us at:
Ciao Ciao Bella
Owner: Jsabelle Sauter
Windeggstrasse 21
8203 Schaffhausen
Switzerland
Email: hello@ciaociaobella.ch
Website: www.ciaociaobella.ch