Privacy Policy

Version / last updated: 20.05.2026

1. Who is responsible (Controller)

The party responsible for the processing of personal data described in this Privacy Policy (the “controller”) is Iremos Consulting GmbH.

This Privacy Policy explains what personal data we process when you visit our online shop at www.kink-knack.com (the “Shop”) and when you place an order, why we process it, on what legal basis, who receives it, how long we keep it, and what rights you have.

2. Scope and Applicable Law

We process personal data in accordance with the Swiss Federal Act on Data Protection (revDSG) and, where our processing falls within its scope — in particular because we offer goods to customers in the European Union — the EU General Data Protection Regulation (GDPR).

“Personal data” means any information relating to an identified or identifiable individual. “Processing” means any handling of personal data, such as collecting, storing, using, transmitting or deleting it.

3. What Personal Data We Process

Depending on how you interact with us, we process the following categories of personal data:

3.1 Data you provide when ordering

• Identity and contact data: name, billing and delivery address, email address, and telephone number where provided.
• Order data: the products ordered, order value, order date, order history and related correspondence.
• Product specification data, including measurements you provide so that a custom-made product can be manufactured to fit you.
• Payment-related data: we receive confirmation of payment and limited transaction details. Full card or payment-account details are processed by our payment service provider, not by us — see Section 6.

3.2 Data collected automatically when you visit the Shop

• Technical data: IP address, device and browser information, date and time of access, pages viewed, and similar server-log data.
• Cookies and similar technologies: see Section 8.

3.3 Data from other contact

If you contact us by email or through the Shop, we process the content of your message and your contact details in order to respond.

3.4 Sensitive data

Some of the data we process in order to manufacture a custom-made product — in particular body measurements — may, depending on the circumstances, be regarded as sensitive personal data or as revealing information about your private life. We process such data only to the extent necessary to manufacture and deliver the product you have ordered, we restrict access to it, and we delete it in accordance with Section 7.

4. Why We Process Your Data (Purposes)

We process personal data for the following purposes:

• To process and fulfill your order: manufacturing the product, arranging shipping and customs documentation, processing payment, and communicating with you about your order.
• To comply with legal obligations, in particular accounting, tax and commercial record-keeping obligations.
• To handle warranty claims, returns in defect cases, and other after-sales matters.
• To operate, secure and maintain the Shop and to prevent misuse and fraud.
• To respond to enquiries and provide customer support.
• Where applicable and permitted, and only on the basis described in Section 5, to send information about our products.

5. Legal Basis for Processing

Where the GDPR applies, we rely on the following legal bases (Art. 6 GDPR); the revDSG does not require a legal basis in the same way but sets equivalent principles of lawfulness, proportionality and good faith:

• Performance of a contract (Art. 6(1)(b) GDPR): processing necessary to perform the purchase contract with you, including manufacture, payment and delivery.
• Compliance with a legal obligation (Art. 6(1)(c) GDPR): processing necessary to meet accounting, tax and retention obligations.
• Legitimate interests (Art. 6(1)(f) GDPR): operating and securing the Shop, preventing fraud, and similar interests, where these are not overridden by your interests or rights.
• Consent (Art. 6(1)(a) GDPR): where we ask for your consent, for example for certain cookies or for any marketing communications. Consent can be withdrawn at any time with effect for the future.

6. Who Receives Your Data

We do not sell your personal data. We share personal data only as described below, and only to the extent necessary.

6.1 Service providers (processors)

We use carefully selected service providers who process personal data on our behalf and on our instructions. These include:

• Hosting and shop platform: the provider that hosts the Shop and the WooCommerce shop system in which orders are stored.
• Payment service provider(s): Stripe/Woopayments, which processes payment data to take your payment.
• Shipping: Swiss Post and its local delivery partners in the destination country, which receive the delivery address and the data needed for carriage and customs clearance.
• Email / communication and, where used, newsletter or analytics providers.

Where these providers act as processors, they are bound by a data-processing agreement requiring them to process personal data only on our instructions and to protect it appropriately.

6.2 Authorities and other third parties

We may disclose personal data to customs authorities and tax or other authorities where this is necessary for shipping, importation or to comply with a legal obligation, and to advisors such as our accountant or auditor and, where necessary, legal advisors, bound by confidentiality.

7. How Long We Keep Your Data

We keep personal data only as long as necessary for the purposes described in this Privacy Policy or as required by law. In particular:

• Order and invoice data needed for accounting and tax purposes is retained for the legal retention period, which under Swiss commercial law is ten (10) years.
• Product specification data, including body measurements, is kept only as long as needed to manufacture the product and to deal with any warranty or after-sales matter relating to it, and is then deleted. Such data is not retained beyond what is necessary for these purposes.
• Data processed on the basis of consent is kept until consent is withdrawn or the purpose ends.

8. Cookies and Similar Technologies

The Shop uses cookies and similar technologies. Some are necessary for the Shop to function (for example, to keep items in your basket and to process an order).

9. International Data Transfers

Some of our service providers may process personal data outside Switzerland or the European Economic Area. 

10. Data Security

We take appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access, including access controls, and limiting access to personal data to those who need it. No transmission or storage of data can be guaranteed to be completely secure.

11. Your Rights

Subject to the conditions and exceptions of applicable law, you have the following rights in relation to your personal data:

• Right of access: to obtain confirmation of, and information about, the personal data we process about you.
• Right to rectification: to have inaccurate or incomplete data corrected.
• Right to erasure: to have personal data deleted where the conditions are met and no retention obligation applies.
• Right to restriction and right to object: to restrict or object to certain processing.
• Right to data portability: to receive certain data in a structured, commonly used format, where applicable.
• Right to withdraw consent: where processing is based on consent, to withdraw it at any time with effect for the future.

To exercise these rights, please contact us using the details in Section 1. You also have the right to lodge a complaint with a supervisory authority: in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC); in the European Union, the data protection authority of your country of residence.

12. Is the Provision of Data Mandatory?

Providing the data needed to conclude and perform a purchase contract — such as your name, delivery address and, for custom-made products, the relevant measurements — is necessary for us to accept and fulfill your order. If you do not provide it, we will not be able to process the order. Providing other data, such as data processed on the basis of consent, is voluntary.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our processing or in legal requirements. The version published in the Shop, marked with the date above, is the current version.