Privacy Policy

Version dated March 1, 2026

In this Privacy Policy, we, OF GOODS — Kaiserhaus Handelz AG, explain how we collect, store, and process personal data. This is not an exhaustive description; specific matters may be governed by other privacy policies, terms and conditions, terms of participation, and similar documents. Personal data refers to any information relating to an identified or identifiable individual.

This Privacy Policy is designed to comply with the requirements of the EU General Data Protection Regulation (GDPR), the Swiss Data Protection Act (DSG), and the revised Swiss Data Protection Act (revDSG). However, whether and to what extent these laws apply depends on the specific circumstances of each case.

1. Responsibility

The entity responsible for the data processing described here is OF GOODS — Kaiserhaus Handelz AG, Marktgasse 41, 3011 Bern. If you have any questions regarding data protection, please contact us at the following address: info@ofgoods.ch.

2. Collection and Processing of Personal Data

We primarily process personal data that we receive from our customers and other business partners—as well as from other individuals involved in our business relationships with them—or that we collect from users of our website and/or other applications during their use. In addition to the data you provide to us directly, the categories of personal data we receive about you from third parties include, in particular, data related to the use of the website (e.g., IP address, MAC address of the smartphone or computer, information about your device and settings, cookies, date and time of the visit, pages and content accessed, features used, referring website, location data).

3. Purposes of data processing and legal bases

We use the personal data we collect primarily to enter into, fulfill, and process our services with our customers and business partners.

In addition, we process your personal data and that of other individuals, to the extent permitted and as we deem appropriate, for the following purposes in which we (and, in some cases, third parties) have a legitimate interest that is relevant to the purpose:

Offering and further developing our products, services, websites, apps, and other platforms on which we are present;
Communication with third parties and handling their inquiries (e.g., job applications, media inquiries);
Advertising and marketing (including the organization of events), provided you have not objected to the use of your data (if we send you advertising as an existing customer, you may object at any time, and we will then add you to a block list to prevent further promotional communications);
Asserting legal claims and defending against legal disputes and administrative proceedings;
Prevention and investigation of criminal offenses and other misconduct (e.g., conducting internal investigations, data analysis for fraud prevention);
Guarantees regarding our operations, particularly our IT systems, websites, apps, and other platforms;

If you have given us your consent to process your personal data for specific purposes (for example, when you sign up to receive newsletters), we will process your personal data within the scope of and based on this consent, provided we have no other legal basis and such a basis is required. You may withdraw your consent at any time; however, this will not affect any data processing that has already taken place.

4. Cookies, tracking, and other technologies related to the use of our website

We typically use “cookies” and similar technologies on our websites to identify your browser or device. A cookie is a small file that is sent to your computer or automatically stored on your computer or mobile device by the web browser you are using when you visit our website. When you visit this website again, this allows us to recognize you, even if we do not know who you are. In addition to cookies that are used only during a session and deleted after your visit to the website (“session cookies”), cookies can also be used to store user settings and other information over a certain period of time (“persistent cookies”). However, you can configure your browser to reject cookies, store them only for a single session, or delete them prematurely. Most browsers are set by default to accept cookies.

In our newsletters and other marketing emails, we sometimes include visible and invisible image elements—where permitted—which, when loaded from our servers, allow us to determine whether and when you have opened the email. This helps us measure and better understand how you use our offerings so that we can tailor them to your needs. You can block this in your email program; most are set by default to do so.

By using our websites and consenting to receive newsletters and other marketing emails, you agree to the use of these technologies. If you do not wish to do so, you must configure your browser or email program accordingly, unless this can be adjusted through the settings.

Google Services

Services provided by the U.S.-based company Google LLC use cookies, among other things, and as a result, data is transferred to Google in the United States; however, we do not believe that this involves any personal tracking based solely on the use of our website.

Google has committed to ensuring an adequate level of data protection in accordance with the U.S.-EU and U.S.-Swiss Privacy Shield frameworks.

For more information, please see Google's Privacy Policy at https://policies.google.com/privacy?hl=de.

Google Analytics

We sometimes use Google Analytics or similar services on our websites. These are third-party services that may be located in any country in the world (in the case of Google Analytics, this is Google Ireland (based in Ireland), which relies on Google LLC (based in the U.S.) as its data processor (both “Google”), www.google.com), which allows us to measure and analyze website usage (non-personally identifiable). For this purpose, persistent cookies set by the service provider are also used. We have configured the service so that visitors’ IP addresses are truncated by Google in Europe before being transmitted to the U.S., thereby preventing them from being traced. We have disabled the “Data Sharing” and “Signal” settings. Although we can assume that the information we share with Google does not constitute personal data for Google, it is possible that Google may use this data for its own purposes to draw conclusions about the identity of visitors, create personal profiles, and link this data to these individuals’ Google accounts. To the extent that you have registered with the service provider yourself, the service provider also knows you. The processing of your personal data by the service provider is then carried out under the service provider’s responsibility in accordance with its privacy policy. Users can prevent the storage of cookies by adjusting their browser software settings accordingly; in addition, users can prevent the collection of data generated by the cookie and related to their use of the online service by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

Google Tag Manager

Google Tag Manager is a solution that allows us to manage so-called website tags via a user interface, enabling us, for example, to integrate Google Analytics and other Google marketing services into our online presence. The Tag Manager itself, which implements the tags, does not process any of the users’ personal data. With regard to the processing of users’ personal data, please refer to the following information about Google’s services.

5. Data Sharing and Data Transfer Abroad

As part of our business activities and for the purposes set forth in Section 3, we may disclose such information to third parties, to the extent permitted and as we deem appropriate, whether because they process it on our behalf or because they wish to use it for their own purposes. This applies in particular to the following entities:

Our service providers, including data processors (such as IT providers);
Retailers, suppliers, and other business partners;
Customers;
domestic and foreign authorities, agencies, or courts;
Media;
the general public, including visitors to websites and social media;

Some of these recipients are located in the country, but others may be abroad.

6. Retention Period for Personal Data

We process and store your personal data for as long as necessary to fulfill our contractual and legal obligations or to achieve the purposes for which the data is processed; this includes, for example, the duration of the entire business relationship (from the initiation and execution of a contract through to its termination) and beyond, in accordance with statutory retention and documentation requirements. In this context, personal data may be retained for the period during which claims can be asserted against our company and to the extent that we are otherwise legally obligated to do so or legitimate business interests require it (e.g., for evidentiary and documentation purposes).

7. Data Security

We take appropriate technical and organizational security measures to protect your personal data from unauthorized access and misuse.

8. Obligation to Provide Personal Data

As part of our business relationship, you must provide the personal data necessary for establishing and conducting a business relationship and fulfilling the associated contractual obligations (you are generally not legally required to provide us with data). Without this data, we will generally not be able to enter into or fulfill a contract with you (or the entity or person you represent). Furthermore, the website cannot be used if certain information necessary to ensure data transmission (such as your IP address) is not disclosed.

9. Rights of the Data Subject

Under the data protection laws applicable to you and to the extent provided for therein (such as under the GDPR), you have the right to access, rectify, and erase your data, the right to restrict data processing, the right to object to our data processing, and the right to receive certain personal data for the purpose of transferring it to another party (so-called data portability). Please note, however, that we reserve the right to invoke the restrictions provided for by law, for example if we are obligated to retain or process certain data, have an overriding interest in doing so (to the extent we are permitted to invoke such an interest), or require it to assert claims.

10. Changes

We may update this Privacy Policy at any time without prior notice. The most recent version published on our website is the one that applies. If this Privacy Policy is part of an agreement with you, we will notify you of any changes via email or by other appropriate means in the event of an update.