Legal notice
Privacy policy
Protection of your personal data
Docteur Paul et Karin Herzog SA attaches importance to the protection of your privacy. This policy explains which data we collect, why, to whom we entrust it, how long we keep it, and which rights you may exercise.
It is subject to the Swiss Federal Act on Data Protection (FADP) and its ordinance. If you reside in the European Union, the General Data Protection Regulation (GDPR) also applies to our processing.
1 · Who is the data controller
Docteur Paul et Karin Herzog SA
Route de Taillepied 1 · 1095 Lutry · Switzerland
Company number: CHE-105.893.464
For any question regarding your data: info@karinherzog.ch
2 · Which data we collect, and in which case
When you simply visit the site
We use an audience measurement tool, Plausible, to understand which pages are viewed and to improve the site.
It works without cookies and without a persistent identifier. Your IP address is not kept: it serves only to determine a country and a region, then it is erased. No profile is built, and it is impossible to follow you from one site to another or from one device to another. The data is hosted in the European Union, we are its sole recipients, and it is neither resold nor used for other purposes.
What we measure: the pages viewed, the page you come from, your browser, your system, your type of device, your country and your region, as well as a few steps of the journey (adding to the cart, going to checkout, confirmed order and its amount, term entered in the search, page not found).
A search term containing an e-mail address or a sequence of seven digits or more is never transmitted. This check exists because a personal detail is sometimes typed into a search field by mistake.
We use no advertising tracker, no Google Analytics, and no social network tool.
Our host also keeps, like any web server, technical logs containing in particular your IP address, the page requested and the timestamp. They serve to ensure the operation and the security of the service, and nothing else.
When you write to us via the contact form
We record the subject of your request, your name, your e-mail address, your message and the language of the form. Your telephone number and an order number are optional: they are recorded only if you provide them.
We also record a prefix of your IP address, and not the full address: the final part of the address is removed. This prefix serves only to limit the number of messages sent from the same connection (five per hour), in order to protect us from automated submissions. Your full IP address is never recorded.
When you create an account
We record your e-mail address, your surname and first name, your salutation, your preferred language, and your telephone number if you provide it.
There is no password. You log in with a single-use code that we send you by e-mail. This code is valid for a few minutes and is not kept beyond that.
When you save a delivery address
Surname and first name of the recipient, street and number, any additional line, postal code, town, country, and an optional telephone number.
When you place an order
The items ordered and their quantities, the amounts, the currency, the delivery address, your e-mail address, the method of payment, the status of the order and its payment reference. Where applicable, the tracking number of your parcel is added.
When you order by telephone
We record your name, your delivery address and your telephone number, as well as the details of your order. Your e-mail address is not required: if you do not give us one, we do not ask you for one, and you receive your invoice with the parcel. We also record the name of the member of our team who entered the order, so that we can answer any question concerning it.
When you open an e-mail we send you
Our order e-mails contain images: the name of the brand, the photograph of the products ordered, our signature. When your e-mail software displays these images, it requests them from our host, which leaves a trace in its technical logs.
We do not make use of this trace. Our e-mails contain no tracking pixel, no image address carrying an identifier, and we do not record whether you have opened a message. If you prefer, most e-mail programs allow you to block the automatic display of images: our e-mails remain perfectly readable without them.
3 · Why we process this data, and on what basis
| What we do | Why this is permitted |
|---|---|
| Carry out your order: prepare, invoice, ship, keep you informed | performance of the contract of sale you conclude with us |
| Maintain your customer account, your addresses and the history of your orders | performance of the contract, and your request to open an account |
| Reply to your message | your request, and our legitimate interest in replying to you |
| Keep the accounting records | a legal obligation (art. 958f of the Swiss Code of Obligations) |
| Measure traffic on the site in order to improve it, without cookies and without recording any IP address or permanent identifier | our legitimate interest in knowing how our own site is used, without identifying anyone |
| Limit abusive submissions and detect attempted payment fraud | our legitimate interest in protecting the service and our customers |
Without the data necessary for the order, it cannot be carried out. The other information is optional and you remain free not to give it.
We do not use your data for targeted advertising, and we build no behavioural profile.
No decision concerning you is taken by automated means. A human being handles every order and every request.
4 · Cookies and storage in your browser
The site uses only what is strictly necessary:
- Two session cookies, set only when you log in to your account. They keep your session open and disappear when you log out.
- Your cart, kept in the local memory of your browser (the item references and their quantities). It does not leave your device until you place an order, and we cannot read it remotely.
No audience measurement cookie, no advertising cookie, no social network cookie. Our measurement tool works without cookies, which is why this site imposes no consent banner on you.
5 · Payment
Payments are processed by Datatrans AG (Zurich, Switzerland), a specialised Swiss payment processing provider.
The data of your means of payment never passes through our servers and is never recorded with us. You enter it directly on the payment page of Datatrans. In return we receive only a transaction reference and its result.
6 · To whom your data is disclosed
We call upon a small number of providers, who act only on our instructions and cannot use your data for their own purposes:
| Provider | Role | Where |
|---|---|---|
| Supabase | database, customer accounts | Zurich, Switzerland |
| Datatrans AG | payment processing | Zurich, Switzerland |
| Brevo | sending of our automatic e-mails (order confirmation, login code, dispatch notice) | European Union |
| Infomaniak | company e-mail, reception of what arrives at info@ | Switzerland |
| Vercel Inc. | provision of the site | United States, servers serving Europe located in the European Union |
| Plausible | audience measurement without cookies, which records no IP address and no permanent identifier | European Union |
| Swiss Post | delivery of your parcel | Switzerland |
We sell your data to no one. We pass it on to no commercial partner for canvassing purposes, neither your name, nor your address, nor your e-mail address.
We may be required to disclose data to an authority where the law obliges us to do so.
7 · Where your data is kept
We deliver only within Switzerland. Your delivery address is therefore never disclosed to a foreign carrier.
Your account and order data is kept in Switzerland, in Zurich. The payment provider is Swiss. Our company e-mail is Swiss. Our accounting is Swiss.
The site itself is provided by Vercel Inc., an American company, whose servers serving Europe are located in the European Union. Vercel processes no order data: these are recorded in our database in Switzerland. Vercel keeps technical logs, including your IP address, necessary for the operation and the security of the service. This processing is governed by the data processing agreement concluded with this provider.
The sending of our automatic e-mails is entrusted to Brevo, whose servers are located in the European Union. Brevo receives your e-mail address and the content of the message intended for you, for the sole purpose of delivering it.
The company that publishes our database, Supabase Inc., also has its seat in the United States. The data is stored in Switzerland, but access from the United States, for example for a technical intervention, cannot be excluded. This access is governed by the data processing agreement concluded with this provider, which forbids it any use of your data for its own purposes.
8 · How long we keep it
- Orders, invoices and accounting records: ten years from the end of the financial year, in accordance with article 958f of the Swiss Code of Obligations. We cannot delete them before that period, even at your request.
- Data of your account: as long as your account exists. It is deleted when you request the closure of the account, with the exception of the accounting records above.
- Messages sent through the contact form: twelve months, then deletion. A message relating to a disputed order is kept for the time needed to handle the dispute.
- IP address prefixes from the contact form: the time needed to limit submissions, that is six hours.
- Login codes: a few minutes.
- Audience measurement data: aggregated, with no link to a person, kept by our provider for the establishment of statistics.
9 · Your rights
At any time you may:
- request access to the data we hold about you;
- have corrected an inaccurate item of data;
- request the deletion of your data, subject to our accounting retention obligations;
- object to a processing operation or request its restriction;
- receive your data in a machine-readable format, or request their transfer.
A single address for all of this: info@karinherzog.ch. We reply as soon as possible, and at the latest within thirty days. We may ask you to prove your identity before disclosing data, so as not to hand it to someone else.
If our reply does not satisfy you, you may refer the matter to the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern. If you reside in the European Union, you may also refer the matter to the data protection authority of your country.
10 · Children and adolescents
The site is not intended for children and we do not knowingly collect data concerning persons under sixteen years of age. If you notice that such a case has occurred, write to us and we will delete the data concerned.
11 · Security
Exchanges with the site are encrypted. Access to the database is restricted by rules that prevent one customer from seeing the data of another. Access to our back office is personal and limited to authorised persons. We record no password, since the site uses none.
No system is perfectly impenetrable. We implement proportionate measures and review them regularly.
12 · Amendments
We may adapt this policy as the site evolves, for example if we add a service. The version in force is always the one published on this page, with its date of update.
Last update: 13 September 2026.
13 · Contacting us
Docteur Paul et Karin Herzog SA · Route de Taillepied 1 · 1095 Lutry · Switzerland
info@karinherzog.ch · +41 21 791 72 91