Privacy Policy
This policy describes what personal data AREPO collects, for what purposes it is used, and what rights data subjects have. The Swiss Federal Act on Data Protection (FADP) applies and, for persons resident in the European Union, Regulation (EU) 2016/679 (GDPR).
Data controller
Davide Aliano — AREPO
Via Arbostora 15, 6913 Carabbia, Switzerland
info@areposwiss.com
Data processed
- Contact and order data: first name and surname, billing and shipping address, email address, telephone number.
- Order-related data: products purchased, personalisation specifications (size, engraving), order history, communications with customer service.
- Payment data: processed directly by payment service providers. AREPO receives only confirmation of the transaction and does not store full card details.
- Browsing data: IP address, browser and device type, pages visited, referral source, cookie identifiers.
- Waiting list and newsletter sign-up data: email address and date of sign-up.
Purposes and legal bases
- Order fulfilment, production, shipping, support — performance of the contract.
- Accounting and record-retention obligations — legal obligation.
- Fraud prevention and store security — legitimate interest.
- Commercial communications, newsletter, waiting list — consent, revocable at any time.
- Usage statistics and site improvement — consent, for non-essential cookies.
- Marketing and advertising measurement — consent.
Cookies and tracking technologies
The website uses:
- Strictly necessary cookies, essential to the operation of the store (cart, session, security, language preference). These do not require consent.
- Statistical cookies, which allow us to understand how the site is used in aggregate form.
- Marketing cookies, including the Meta Pixel operated by Meta Platforms Ireland Ltd., which allows us to measure the effectiveness of advertising campaigns and to reach relevant audiences on Meta platforms. The Pixel may transmit to Meta data relating to the visit and to any purchase, including in the form of pseudonymised identifiers.
Statistical and marketing cookies are activated only with prior consent, given through the banner displayed on the site. Consent can be modified or withdrawn at any time through the cookie settings or by deleting cookies in your browser.
Recipients of data
Personal data may be disclosed, to the extent necessary, to: Shopify, which provides the online store infrastructure and hosts its data; payment service providers, for processing transactions; carriers and logistics operators, for delivery and customs clearance; email and marketing service providers, for sending communications; Meta Platforms, within the limits described above and subject to consent; and authorities, where required by law.
AREPO does not sell its customers' personal data.
Transfers abroad
Some service providers are established outside Switzerland and the European Economic Area, in particular in the United States and Canada. In such cases the transfer takes place on the basis of appropriate safeguards, in particular recognised standard contractual clauses, or to countries recognised as providing an adequate level of protection.
Retention
Order data is retained for as long as necessary to perform the contract and thereafter for the period required by statutory retention obligations (ten years for accounting records under Swiss law). Newsletter sign-up data is retained until consent is withdrawn. Browsing data is retained for limited periods, according to the lifetime of the individual cookies.
Rights of data subjects
Every data subject has the right to obtain information about the personal data concerning them; to request its rectification or erasure; to request restriction of processing; to object to processing based on a legitimate interest; to receive their data in a structured format and request its transmission to a third party; and to withdraw consent at any time, without affecting the lawfulness of processing carried out beforehand.
Requests should be addressed to info@areposwiss.com. We may request additional information in order to verify the identity of the requester.
Complaints
Data subjects resident in Switzerland may contact the Federal Data Protection and Information Commissioner (FDPIC). Data subjects resident in the European Union may lodge a complaint with the supervisory authority competent for their country of residence.
Security
AREPO applies appropriate technical and organisational measures to protect personal data against unauthorised access, loss or alteration. The website uses encrypted connections. No security measure, however, can guarantee absolute protection.
Amendments
This policy may be updated. The version in force is always published on this page.
Governing language
In the event of any discrepancy between language versions, the English version prevails.
