By Susy – owned by Suchitel Schroeter
Rue Neuve 5, 1020 Renens, Switzerland

Last updated: 2025

By Susy places great importance on the protection of your personal data and your privacy.
This policy explains which data is collected, how it is used, and your rights.

1. Data Controller

By Susy – owned by Suchitel Schroeter
E-mail: contact@bysusy.ch

2. Data Collected

2.1 Data provided by the user

• First and last name
• Postal address
• E-mail address
• Phone number
• Order information
• Delivery details

2.2 Data collected automatically

• IP address
• Browsing data
• Technical and analytics cookies
• Website usage statistics

Use of Google Analytics (anonymized IP)
Google Analytics collects anonymized information such as pages visited, device type, traffic source, and time spent on the site. The IP address is truncated before processing, which prevents identification.

2.3 Payment-related data

Stripe, PayPal, Apple Pay, Google Pay, Twint
→ By Susy never has access to your credit card information.

3. Purposes of Data Processing

Data is used to:

• Process and deliver orders
• Communicate with customers
• Manage after-sales service
• Improve the website
• Analyze website traffic and usage (Google Analytics)
• Comply with Swiss legal requirements / GDPR principles

4. Legal Bases

• Contract performance (orders)
• Legitimate interest (website security, analytics)
• Consent (newsletter, optional cookies)

5. Data Sharing

Data is shared only with:

• Swiss Post (delivery)
• Hosting provider Infomaniak
• Payment solutions (Stripe, PayPal, Google Pay, Apple Pay, Twint)
• Statistical tools: Google Analytics (Google Ireland Ltd.) – anonymized data; processing may occur on servers located in the United States.

No data is sold or shared with unnecessary third parties.

6. Data Retention

• Customer accounts: as long as the account is active
• Order data: 10 years (Swiss accounting obligations)
• Cookies: according to their expiration period
• Newsletter: until unsubscribed

7. International Transfers

Some data may be transferred outside Switzerland/EU (Stripe, Google, Apple), but always with GDPR-level safeguards such as standard contractual clauses or equivalent frameworks.

In the context of Google Analytics, anonymized data may be transferred to the United States. Google applies the Standard Contractual Clauses (SCC) approved by the European Commission.

8. Your Rights

You have the right to:

• Access your data
• Rectify your data
• Request deletion
• Object to processing
• Request data portability
• Withdraw consent at any time

Requests may be sent to: contact@bysusy.ch

9. Security

By Susy applies technical and organisational measures to protect your data (HTTPS, Swiss hosting, restricted access).

10. Cookies and consent

Our website uses a cookie management banner (CookieYes). You can accept or refuse non-essential cookies, including analytical cookies used by Google Analytics.
Google Analytics is only activated after you provide consent. You can change your preferences at any time via the “Manage cookies” link available in the footer.

11. Changes to this Policy

This policy may be updated at any time.
The online version is the legally binding version.