Facebook X-twitter Instagram

Privacy Policy

1. Who we are

This privacy policy explains how Fabia Lüthi – Malaguese Schweiz and Finca La Pitagua, S.L. (hereinafter “we” or “Malaguese”) processes personal data when you use our website or online shop, place an order with us or otherwise interact with us.

Controller:

FINCA LA PITAGUA, S.L.
B16838328
C/ Córdoba 6.
29001. Málaga
España

Fabia Lüthi – Malaguese Schweiz
Sole proprietorship
Schürmattstrasse 26
8962 Bergdietikon
Switzerland

E-mail:
info@malaguese.com

2. What data we process

In particular, we process the following categories of data:

  • Master data: name, address, contact details (e-mail address, telephone number)
  • Order and contract data: ordered products, delivery addresses, invoicing and payment information, communication in connection with the order (e.g. complaints)
  • Communication data: content of e-mails or contact requests
  • Technical data: IP address, date and time of access, pages visited, browser/device information (depending on the shop/hosting provider used)

We only process the data that is necessary for the respective purpose.

3. Purposes of data processing

We process personal data for the following purposes:

  • Processing orders and fulfilling contracts
  • Delivering our products and handling payments
  • Communicating with customers (e.g. questions, complaints)
  • Operating, securing and improving our online services
  • Complying with legal obligations (e.g. accounting, tax law)
  • Enforcing or defending legal claims

Marketing activities (e.g. newsletters) are only carried out if this is legally permissible or if we have obtained your consent. You can withdraw your consent at any time with effect for the future.

4. Legal bases

We base the processing of personal data in particular on:

  • Performance of a contract or pre-contractual measures
  • Compliance with legal obligations
  • Our legitimate interests (e.g. operation and security of the online shop, communication, improvement of our services)
  • Your consent, where we ask for it (e.g. for certain marketing activities)

5. Disclosure of data to third parties

We only disclose personal data to third parties to the extent necessary for the purposes described above or where we are legally obliged to do so. This includes in particular:

  • Payment service providers (e.g. providers for TWINT, card or online payments)
  • Logistics and transport service providers (e.g. parcel or forwarding companies)
  • IT/hosting and shop providers (e.g. platform for the online shop)

We do not sell your personal data and do not pass it on to third parties for their own independent marketing purposes.

6. Data transfer abroad

Some service providers may be located abroad or may process personal data abroad (e.g. in the EU/EEA or other countries). In such cases, we generally use established providers which, according to their own information, comply with the applicable data protection law (in particular GDPR/revDSG) and provide appropriate safeguards (e.g. standard contractual clauses). We rely on the information and contractual terms of these providers.

7. Retention periods

We store personal data only as long as necessary for the purposes described in this privacy policy or as long as we are legally obliged to do so. As a rule, this means:

  • Contract and accounting documents (including invoicing data) are retained in accordance with statutory retention requirements (usually 10 years in Switzerland).
  • Data from enquiries without a contractual relationship is retained as long as necessary for handling the enquiry and for reasonable follow-up.
  • Data based on consent (e.g. newsletters) is processed until consent is withdrawn or the purpose no longer applies.

8. Cookies and similar technologies

Our online shop and the shop/hosting platform used may employ cookies and similar technologies in order to:

  • enable basic functions (e.g. shopping cart, language settings),
  • analyse and improve the use of the website.

You can disable cookies in your browser in whole or in part. This may, however, mean that some functions of the online shop are no longer fully available.

9. Your rights

Within the scope of the applicable data protection law, you have in particular the right to:

  • request information about whether and which personal data we process about you,
  • have incorrect personal data corrected,
  • request the deletion or restriction of the processing of your data, and
  • withdraw any consent you have given, with effect for the future.

To exercise your rights, you can contact us using the contact details provided in section 1. You also have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC).

10. Data security

We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access or unauthorised disclosure. These measures include, in particular, access restrictions, secure passwords and – where available – encrypted transmission (e.g. HTTPS).

11. Changes to this privacy policy

We may amend this privacy policy at any time. The version published on our website is the one that applies.

Last updated: 27 November 2025