Privacy policy

Draft status: 26 September 2026

This Privacy Policy explains how Evim GmbH processes personal data in connection with our online shop www.evim.ch, orders, deliveries and communication with customers.

Personal data means information relating to an identified or identifiable natural person, including name, address, contact details, order data and online identifiers.

1. Controller and contact

The controller responsible for the processing described in this policy is:

Evim GmbH
Hauptstrasse 59
CH-5734 Reinach AG
Switzerland

Email: info@evim.ch
Telephone: +41 62 791 11 88

If you have questions about data protection or wish to exercise your rights, you may contact us using these details.

2. Scope and applicable law

This Privacy Policy applies to our online shop, related services and the processing of customer enquiries and orders.

We comply with the Swiss Federal Act on Data Protection (FADP) and its implementing provisions. Where the European Union General Data Protection Regulation (GDPR) applies, its provisions also apply.

3. Sources and categories of personal data

We receive personal data directly from you when you place an order, create a customer account, enter a pre-order or contact us. Additional data is generated when you use our website. During order processing, we may also receive information from payment and delivery providers, such as payment or delivery status.

We process the following categories in particular:

Identity and contact data: name, billing and delivery addresses, email address and telephone number.
Contract and order data: products ordered, quantities, prices, order date, delivery status, returns and refunds.
Payment data: selected payment method, payment status and transaction references.
Communication data: enquiries, messages and customer-service information.
Technical data: IP address, device and browser information, online identifiers and technical log data.
Usage and marketing data: page views, product interactions, campaign attribution and advertising results.

4. Website and technical logs

When you access our website, technical information is processed so that the requested content can be delivered to your device.

This may include IP address, date and time of access, pages and files accessed, browser, operating system and device information, technical status messages, transmitted data volume and, where provided by your browser, the previously visited page.

This processing serves the availability, stability and security of the website, error analysis and the detection and prevention of abusive access.

5. Shopify as our shop platform

Our online shop is operated using Shopify. Shopify International Limited in Ireland is responsible for our region. Shopify provides the technical infrastructure for product presentation, cart, checkout, order management, customer accounts and security functions.

Shopify processes contact, order, transaction, device and usage data and uses affiliated companies and subprocessors. Processing may also take place outside Switzerland.

Shopify Network Intelligence is enabled in our shop. Shopify may use data from interactions with our shop together with data from interactions with other Shopify shops and Shopify. This supports enhanced services, service improvement, personalisation and advertising.

Further information is available in the Shopify Privacy Policy and the Shopify Privacy Portal.

6. Customer accounts, orders and pre-orders

We process your information to manage customer accounts, receive orders, perform contracts, allocate payments and deliver goods. This also includes enquiries, returns, refunds, warranty cases and required business records.

Information required for the relevant process is marked as mandatory in the relevant form. Without it, we may not be able to provide the relevant service fully.

You may request deletion of your customer account by contacting info@evim.ch. Order and business records that we must retain by law or to protect legal claims are excluded.

Pre-orders with STOQ

We use STOQ to record and manage pre-orders. The customer and order data required for the relevant pre-order is processed for this purpose. We do not use STOQ for automatic availability notifications.

7. Payments and credit checks

The payment methods available at checkout are displayed during the ordering process. Depending on the selected method, the data required for processing is transmitted to the relevant payment provider, including name, billing details, amount, transaction reference and payment information.

We receive the payment result and transaction information required for accounting, refunds and customer service. Payment providers process certain data under their own responsibility, particularly for payment processing, fraud prevention and legal obligations.

PostFinance

We use PostFinance payment and e-commerce interfaces for the technical processing of online payments.

These interfaces provide the following payment methods in particular:

Visa;
Mastercard;
PostFinance Pay;
TWINT.

The payment, transaction and technical data required for the selected method is transmitted to PostFinance or the providers involved. We receive the payment status, transaction reference and information about successful, interrupted or declined payments. We do not store full card numbers or security codes.

PostFinance processes certain personal data under its own responsibility, including for payment processing, fraud prevention and legal obligations. Further information is available in the PostFinance Privacy Policy.

PayPal

If you select PayPal, you may be redirected to PayPal’s website or payment environment.

Our shop transmits the data required to process the payment, which may include name, email address, billing and delivery addresses, amount, currency, order number, ordered products and technical information.

PayPal processes this data to execute and confirm the payment, prevent fraud, assess risks and comply with legal obligations. We receive the payment status and transaction reference. PayPal processes certain data under its own responsibility. Its Privacy Policy applies to such processing. See the PayPal Privacy Statement.

POWERPAY / MF Group

If you select payment by invoice, the invoice is issued by POWERPAY / MF Group. The customer, billing and transaction data required for checking and processing is transmitted to the relevant providers.

POWERPAY / MF Group may perform a credit and risk check to decide whether invoice payment can be offered. The invoice is sent directly by POWERPAY / MF Group.

8. Shipping and personal delivery

We ship orders with Swiss Post or another transport provider used for the relevant delivery. We transmit the required recipient and shipment data, including name, delivery address and, where necessary, contact details.

We use Swiss Post Labels to create shipping labels. The required address and order information is processed for this purpose.

Fragile items or other suitable orders may be delivered personally. We use your delivery and contact details to arrange and carry out the delivery.

9. Contact, email marketing and abandoned carts

Contact and customer service

When you contact us, we process your contact details, message content and order information required to handle your request. This is used to answer your enquiry, clarify matters and provide customer service. Order and shipping messages serve contract performance and are separate from advertising emails.

Contact via WhatsApp

If you contact us via WhatsApp, we process your mobile number, name, message content and other information you voluntarily provide.

This serves to answer your enquiry, provide customer service and, where applicable, prepare or perform an order. Depending on your enquiry, order, delivery and payment information may also be processed.

We use WhatsApp Business from WhatsApp Ireland Limited and companies of the Meta group. Data may be processed outside Switzerland, particularly in the United States. WhatsApp and Meta’s privacy policies apply to their further processing. See the WhatsApp Privacy Policy and the Meta Privacy Policy.

Email marketing with Shopify Messaging

We use Shopify Messaging to send campaigns about our products, offers and promotions. We process email addresses, recipient preferences and customer information used for the relevant campaign.

Delivery, open and click information and attributed orders may be analysed to assess the effectiveness of our emails and improve our communication.

We generally send newsletters and other advertising emails only where you have registered or consented. You may withdraw consent at any time using the unsubscribe link or by contacting info@evim.ch.

Reminders for incomplete purchases

We use automated emails to remind customers of incomplete purchases. The email address and information about the relevant cart or checkout may be processed. You may object to these messages at any time.

10. Cookies and cookie preferences

Our shop uses cookies and similar technologies for the cart, checkout, security, preferences, shop analytics and campaign measurement.

Shopify cookie banner

We use Shopify’s cookie banner to manage your choices. You may accept cookies, reject non-essential cookies or change your choices via “Manage preferences”. You may also delete or restrict cookies in your browser; some functions may then be limited.

11. Google Analytics 4

We use Google Analytics 4 to analyse use of our shop. The provider is Google Ireland Limited, Dublin, Ireland. Page views, product interactions, device and browser information, approximate location and online identifiers may be processed. The configured retention period is two months for event data and fourteen months for user data. Data may be processed by Google and affiliated companies in the United States. More information is available in the Google Privacy Policy.

12. Google Ads, Meta Pixel and wetracked.io

Google Ads

We use Google Ads to measure conversions, particularly purchases, and attribute them to campaigns. Event, transaction and technical identifier data may be processed. Personalised advertising settings are available in the Google Ads Centre.

Meta Pixel and Meta advertising

We advertise on Facebook and Instagram and use the Meta Pixel. Page views, product views, cart actions and purchases may be linked to campaigns. Meta may link this information to user accounts and use it for campaign measurement, audiences and advertising personalisation. See the Meta Privacy Policy and Controller Addendum.

wetracked.io

We use wetracked.io Connect to connect our Shopify shop with Meta Ads and Google Ads. The service processes events relating to visits, carts, checkout and orders. Transmission may also take place through server-side interfaces. See the wetracked.io Privacy Policy.

13. Review invitations via Trustpilot

After a purchase, we may send an invitation via Trustpilot to review your experience. The contact and order information required for sending and assigning the invitation is transmitted to Trustpilot. Participation is voluntary. Further information is available in the Trustpilot Privacy Policy.

14. Other shop applications

We use additional applications to operate and manage our shop. Depending on their functions, customer, order, usage or technical data may be processed.

YouTube videos

YouTube videos may be embedded on our website. The provider is Google Ireland Limited. When a page containing an embedded video is opened, or at the latest when a video is played, technical information, IP address and device and browser information may be transmitted to YouTube or Google. Cookies or similar technologies may be used.

Data may be processed in the United States and other countries. Where required, non-essential YouTube technologies are activated only after your choice in the cookie banner. See the Google Privacy Policy and YouTube privacy information.

Order Printer: order and business documents.
Matrixify and Flow: imports, exports and automated processes.
AgencyAnalytics: reports and analyses from connected accounts.
Instafeed: embedded Instagram content.
ToastiBar: purchase notifications.
Translate & Adapt and T Lab: translation and, where applicable, language or location detection.
Search & Discovery: search and product recommendations.
syncX: stock synchronisation, pricing and countdown functions where activated.
BL Custom HTML CSS JS Liquid and XO Insert code: scripts, services and trackers embedded through these applications.

15. Recipients of personal data

We disclose personal data where necessary and lawful for the purposes described. Recipients may include shop, hosting and IT providers, payment and shipping providers, analytics, advertising, tracking, review and communication services, providers supporting our systems or campaigns, fiduciaries, legal advisers, authorities and courts.

Processors process data on our behalf under agreed services. Certain platforms and payment providers process data under their own responsibility.

16. Disclosure abroad

When using shop, analytics, advertising and payment services, personal data may be processed outside Switzerland. Shopify, Google, Meta, PayPal and their providers may process data in Ireland, Canada, the United States, Singapore and other countries depending on the services used.

For transfers to countries without adequate protection, we use appropriate safeguards or an applicable legal exception, including standard contractual clauses adapted for Switzerland where required.

17. Retention and deletion

We retain personal data for as long as necessary for the relevant purposes, taking account of legal retention duties and the protection of legal claims.

Order and contract records: during processing and beyond where required by law or legal claims.
Accounting records: generally ten years as required by law.
Customer enquiries: until finally handled and beyond only where a retention reason remains.
Customer accounts: for the duration of the account, subject to legal duties.
Google Analytics 4: two months for event data and fourteen months for user data according to our property settings.

When the purpose and retention reasons end, data is deleted or anonymised.

18. Data security

We take appropriate technical and organisational measures to protect personal data. Website transmission is encrypted using HTTPS. Complete security cannot nevertheless be guaranteed.

19. Your rights

Subject to applicable law and legal requirements, you may request access, correction, deletion, restriction or cessation of unlawful processing, data portability and withdrawal of consent for the future. These rights are not unlimited. Send requests to info@evim.ch. You may also contact the Swiss Federal Data Protection and Information Commissioner (FDPIC).

20. Automated individual decisions

For payment by invoice, POWERPAY / MF Group may perform credit and risk checks and decide whether this payment method can be offered. The privacy information provided during payment applies to the details of this processing.

21. Additional information where the GDPR applies

Where the GDPR applies, processing is based on contract performance, legal obligations, legitimate interests or consent in accordance with Article 6(1)(a)–(f) GDPR, depending on the purpose. You may also have rights to restriction and to complain to a supervisory authority. You may object at any time to direct marketing.

22. Changes

We update this Privacy Policy when our processing or legal requirements change. The current version is published on our website.

Last updated: 26 September 2026