Privacy Policy
Last updated: 9 August 2026
1. Controller
MANOVIS GmbH
Hauptstrasse 36, 4415 Lausen, Switzerland
Authorised managing director: Stefan Gafner
Email: hello@creggles.com · Telephone: +41 (0)61 926 2000
2. Scope and applicable law
This policy applies to the website www.creggles.com and the online shop operated through it. The Swiss Data Protection Act (revDSG) applies. For visitors from the European Economic Area, the GDPR applies in addition.
3. What data we process
a) Order and customer data — name, delivery and billing address, email address, telephone number (if provided), order and payment history. Purpose: performance of the contract, delivery, invoicing, support. Basis: performance of a contract (Art. 6(1)(b) GDPR).
b) Customer account — you may create an account to view your orders and sign in again. Access credentials and the data under a) are processed. Basis: performance of a contract or consent.
c) Contact enquiries — information from the contact form or from emails. Basis: legitimate interest in answering your enquiry, or pre-contractual steps.
d) Newsletter — email address, time of sign-up. Basis: consent, revocable at any time via the unsubscribe link in every email.
e) Server log data — IP address, date and time, page requested, browser type. Purpose: operation, security, error analysis. Basis: legitimate interest.
4. Cookies
Necessary cookies — no consent required, the shop does not work without them:
| Cookie | Purpose | Storage period |
|---|---|---|
| session_id | Session, cart, login (HttpOnly, Secure) | 7 days |
| frontend_lang | Selected language | 1 year |
| tz | Display time zone | Session |
Cookies requiring consent — Google Analytics (see section 5). These are set only after you have agreed in the cookie banner. Until then, analytics and advertising storage are technically disabled (Google Consent Mode, default: denied). You can withdraw your consent at any time and delete cookies in your browser.
5. Third-party services
We pass on personal data only where necessary to perform the contract, to comply with legal obligations, or with your consent:
| Service | Provider | Purpose | Data |
|---|---|---|---|
| Shop, hosting, ERP | Odoo S.A., Belgium | Operation of the website and shop, order processing | Order and customer data, log data |
| Payment processing | Stripe Payments Europe Ltd., Ireland (where applicable Stripe Inc., USA) | Card payments and other payment methods | Payment and transaction data, name, email |
| Shipping | Swiss Post (Die Schweizerische Post AG), Switzerland | Delivery of the order | Name, delivery address |
| Web analytics | Google Ireland Ltd. (Google Analytics 4) | Reach measurement — only with consent | Truncated IP, usage behaviour, device information |
| Fonts | Google Ireland Ltd. (Google Fonts) | Rendering of the website | IP address |
| Product data | Google Ireland Ltd. (Merchant Center) | Display of product data in Google Search | Product data only, no customer data |
Card payment data is processed directly by Stripe; full card numbers never enter our systems. For transfers to countries without an equivalent level of data protection we rely on the European Commission's standard contractual clauses or on recognised adequacy decisions.
6. Retention
- Order, invoice and accounting data: 10 years (Art. 958f CO).
- Contact enquiries: until the matter is concluded, thereafter within the statutory periods.
- Newsletter: until consent is withdrawn.
- Google Analytics data: 2 months for event and user data; the period resets on new activity by the same person. Aggregated standard reports are unaffected.
7. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and objection to certain processing. You may withdraw consent at any time with effect for the future.
Please contact hello@creggles.com. You also have the right to lodge a complaint with a supervisory authority — in Switzerland the FDPIC, in the EEA the authority responsible for you.
8. Data security
The website is delivered exclusively over HTTPS. Access to customer data is limited to authorised persons within MANOVIS GmbH and to the processors named in section 5.
9. Changes
We update this privacy policy when our processing changes. The version published on this page applies.