Privacy policy

The controller for data processing is wazzl Schweiz GmbH, Mattenweg 21, 3322 Urtenen-Schönbühl, Switzerland. Contact person: Mauro Rebsamen. Contact: hello@tierda.shop or the contact form.

When you visit the shop, technically necessary usage data may be processed, including your IP address, time of access, pages visited, browser and device data, and server logs. For order requests, the shop processes cart, contact, billing and delivery details. No payment is currently taken and no card or payment details are collected.

If you use the contact form, we store your name, email address, subject, message, consent to this privacy policy and the time of your enquiry.

We process data to provide the shop, fulfil orders, answer enquiries, prevent misuse and improve our services. Where the GDPR applies, processing is based, as appropriate, on Article 6(1)(b) GDPR (contract or pre-contractual measures), Article 6(1)(c) GDPR (legal obligations), Article 6(1)(f) GDPR (legitimate interests), or your consent under Article 6(1)(a) GDPR.

Contact enquiries are stored in a protected shop database and forwarded via Resend to hello@tierda.shop. They are used solely to deal with your request. We delete or anonymise them as soon as they are no longer required, at the latest 24 months after completion of the enquiry, unless statutory retention obligations prevent this.

The shop currently operates on the existing hosting infrastructure. If it is later migrated to Amazon Web Services (AWS), the relevant processor and transfer information will be added to this notice. TierDa manages product data, the cart and order preparation independently. Where service providers process data outside Switzerland or the EEA, the required safeguards will be taken into account.

Essential cookies and local storage support your shop session, cart, language and security. Optional Google Analytics 4 (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) is prepared. Google tags load only after active statistics consent; no optional measurement before consent or after rejection (Basic Consent Mode). Measurement covers public pages, catalog product and cart actions and a contact-success counter without form content. Google may process usage/device data, IP addresses in transport and online identifiers. We do not send form content, names, emails, phone numbers, account/emergency profiles, payment data or Magic Link tokens as event data. Query strings and URL fragments are removed. Ad personalisation, Google Signals and User-ID are not enabled. Analytics cookies and your choice last at most 180 days. Consent is voluntary (Article 6(1)(a) GDPR where applicable) and can be withdrawn via “Privacy choices”; withdrawal deletes Analytics cookies and reloads without the Google tag. Processing in the US may occur. Contractual/transfer safeguards and the definitive privacy notice require external legal review before final approval.

Where the legal requirements are met, you may request access, rectification, erasure, restriction of processing, data portability and objection, and may withdraw consent with effect for the future. You also have the right to lodge a complaint with a competent data protection supervisory authority.

This notice is updated when functions, service providers or the legal situation change. Status: 9 October 2026.

The sales shop optionally uses Meta Pixel (dataset 1092549910299854), provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. It measures Facebook and Instagram advertising and builds advertising audiences. Marketing consent is independent of Google statistics and off by default. The Meta script loads only after explicit consent; without consent there are no pixel-image requests or Meta preconnects.

Manual events cover approved public sales pages, real product views, cart additions and the actual entry into checkout. Parameters are fixed product/variant IDs, quantities, CHF and the applicable tier amount. An order request is not measured as a paid purchase. Accounts, administration, contact/support, checkout and public emergency profiles are excluded. Only fixed non-personal advertising UTMs and a bounded, case-sensitive Meta click ID (fbclid) are allowed on sales pages. Unknown or sensitive URL parameters and unapproved referrers still block the integration.

Only after marketing consent may an existing validated fbclid be stored as a pseudonymous advertising identifier in the first-party _fbc cookie, with a maximum lifetime we set to 90 days. No click ID is invented; UTMs are not click IDs. After consent, Meta may create _fbp to recognise the browser. Advertising parameters are removed from the page address before the SDK loads and are not separately stored. An approved Facebook/Instagram or shop referrer may require a brief referrer-free page restart after consent; the original referrer path and query are not passed to the SDK. Approved language selections and public section anchors are retained.

Meta may process IP addresses, browser/device data, cleaned page addresses and online identifiers, including in the US. We send no names, contact, address, free-text, animal/owner, emergency, token or order-number data as event parameters and do not hash customer data. Advanced matching, automatic metadata/button collection and Conversions API are not enabled; autoConfig is false before initialisation and automatic SPA page views are disabled. The _fbp lifespan and processing of data already sent also depend on Meta and browser settings.

Shop marketing consent lasts at most 180 days and can be withdrawn through “Privacy choices” (Article 6(1)(a) GDPR where applicable). Denial or withdrawal prevents new advertising identifiers from being saved, stops transmission, removes controllable _fbp/_fbc cookies and reloads the page to remove an already loaded Meta library. It cannot retroactively delete data already sent to Meta or third-party cookies. Contractual, transfer and controller details and this notice remain subject to external legal review.