Last updated:
September 25, 2025
Table of Contents
• Controller
• Overview of Data Processing
• Relevant Legal Bases
• Business Services
• Use of Cookies
• Contact and Inquiry Management
• Social Media Presences
⸻
Controller
Michael Laborera / Kaoriscent Seestrasse 295a 8804 Au ZH, Switzerland Email: info@kaoriscent.com Website: kaoriscent.shop
⸻
Overview of Data Processing
The following summary outlines the types of data processed, the purposes of processing, and the categories of data subjects.
Types of Data Processed
• Inventory data
• Contact data
• Content data
• Usage data
• Meta, communication, and procedural data
Categories of Data Subjects
• Communication partners
• Users
Purposes of Processing
• Communication
• Organizational and administrative purposes
• Feedback
• Provision of our online services and user experience
• Public relations
⸻
Relevant Legal Bases
Under Swiss Data Protection Law (FADP): If you are located in Switzerland, we process your data based on the Federal Act on Data Protection (FADP). Unlike the EU GDPR, the FADP generally does not require a specific legal basis to be cited for data processing. Personal data are processed in good faith, lawfully, and proportionately (Art. 6 para. 1–2 FADP). Furthermore, personal data are collected for a specific, recognizable purpose and only processed in a manner compatible with that purpose (Art. 6 para. 3 FADP).
⸻
Business Services
We process data from our contractual and business partners—such as customers and interested parties (collectively referred to as “contractual partners”)—in the context of contractual or pre-contractual relationships and related communications. We use this data to fulfill our contractual obligations, including providing agreed services, handling warranty and service issues, and complying with legal duties. We also process data to protect our legitimate interests in secure and efficient business operations and to safeguard our partners and our enterprise against misuse or data breaches.
Where required, we share data with third parties (e.g., telecommunications providers, logistics companies, subcontractors, banks, tax consultants, payment processors, or authorities) to meet these obligations or comply with legal requirements. We generally delete data after four years (typical warranty period) unless longer retention is required (e.g., for tax reasons, usually ten years). Data disclosed to us by a client within an assignment are deleted after the completion of that assignment, in accordance with applicable legal requirements.
Additional Notes on Processes and Services
• Online shop, order forms, e-commerce, and service fulfillment: We process customer data to enable the selection, purchase, payment, and delivery of products or services. We use delivery and payment service providers (e.g., postal and shipping companies, banks, and payment processors) as needed. Legal basis: Contract performance and pre-contractual inquiries (Art. 6(1)(b) GDPR).
⸻
Use of Cookies
Cookies store or access information on users’ devices to ensure functionality, security, and convenience, as well as to analyze visitor behavior. We use cookies in accordance with legal requirements. Where consent is required, we obtain it before setting cookies. If not required, cookies are used based on our legitimate interests—e.g., to ensure the proper operation and security of our online services. Consent can be withdrawn at any time. We provide clear information on the scope and types of cookies used.
Legal Bases
• Consent (Art. 6(1)(a) GDPR)
• Legitimate interests (Art. 6(1)(f) GDPR) Retention Periods
• Temporary (session) cookies: Deleted when the user leaves our website or closes their browser/app.
• Permanent cookies: Remain stored for up to two years to retain user preferences or login status.
Withdrawal and Opt-Out
Users can revoke their consent or manage cookie settings via browser privacy options.
Additional Notes
• Cookie data processed with consent: We use a consent management platform (CMP) to obtain, store, and manage cookie consents. Consent records include pseudonymous user IDs, timestamps, scope of consent (e.g., categories of cookies or providers), and browser/device information. Storage duration: Up to two years. Legal basis: Consent (Art. 6(1)(a) GDPR). ⸻ Contact and Inquiry Management When contacting us (e.g., by post, email, phone, contact form, or social media), we process the provided data to handle the inquiry and any related matters.
Types of Data Processed
• Inventory data (e.g., full name, address, customer number)
• Contact data (e.g., email, phone, postal address) • Content data (e.g., messages, attachments, timestamps)
• Usage data (e.g., page views, interactions, device types)
• Meta/communication data (e.g., IP addresses, time, identifiers)
Data Subjects
• Communication partners Purposes
• Communication
• Administrative and organizational procedures
• Feedback collection
• Provision and improvement of our online services Retention and Deletion Data are deleted according to the principles outlined in the section “General Information on Data Retention and Deletion.”
Legal Bases
• Contract performance and pre-contractual measures (Art. 6(1)(b) GDPR)
• Legitimate interests (Art. 6(1)(f) GDPR) Additional Notes
• Contact forms: Data submitted through our contact form or other communication channels are used solely to respond to the respective inquiry. Legal basis: Contract performance (Art. 6(1)(b) GDPR), Legitimate interests (Art. 6(1)(f) GDPR).
⸻
Social Media Presences
We maintain online presences on social media platforms to communicate with users and share information about our services. Please note that user data may be processed outside the European Union, which can pose risks such as limited enforcement of user rights. Social media platforms typically process user data for advertising and analytics purposes, creating usage profiles to serve personalized ads both within and outside the networks. Cookies and similar technologies may be used for this purpose. For detailed information and opt-out options, please refer to the privacy policies of the respective platform operators. For access requests or other data subject rights, please contact the respective platform providers directly, as they control the relevant user data. However, you may also contact us for assistance.
Types of Data Processed
• Contact data
• Content data
• Usage data
Data Subjects
• Users Purposes
• Communication
• Feedback
• Public relations
Retention and Deletion
In accordance with the section “General Information on Data Retention and Deletion.”
Legal Basis
• Legitimate interests (Art. 6(1)(f) GDPR)
Additional Notes on Services
• Instagram:
Social network for sharing photos and videos, commenting, messaging, and following profiles. Provider: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland Legal basis: Legitimate interests (Art. 6(1)(f) GDPR)