Privacy policy

Responsible for data processing on this website:

Milchstrasse Luzern AG
Bundesstrasse 14
CH-6003 Lucerne
erde@milchstrasse.lu

What data we process

When you visit this website, technical access data (e.g. IP address, date and time, browser used) is processed in server logs. When you order in our webshop, we process the information you provide during the order process: name, contact details, the chosen pickup date, and details of your order and payment.

What we use the data for

We use this data to handle your order and pickup, to communicate with you about your order, to fulfil legal obligations (e.g. bookkeeping) and to run the website securely and reliably.

Shopify as processor

Our online shop runs on the e-commerce platform Shopify (Shopify International Ltd., Ireland, and other companies of the Shopify group). Shopify processes order and access data on our behalf and stores it on servers that may also be located outside Switzerland. More information: Shopify's privacy policy.

Payment

You can pay by TWINT, credit card or PayPal. Your payment data is processed directly by the respective payment provider – TWINT AG, your card issuer or the payment processor, or PayPal (Europe) S.à r.l. et Cie, S.C.A. We ourselves never receive complete card or account details.

Cookies

This website uses technically necessary cookies, for example for the shopping cart, the language setting and the security of the shop. The shop does not work without these cookies. We currently do not use third-party marketing or tracking cookies.

Sharing of data

We only pass on personal data where this is necessary to process your order (e.g. to payment providers) or where we are legally obliged to do so. We do not sell personal data.

Disclosure abroad

Shopify and the payment providers we use may also process personal data outside Switzerland, in particular in the European Economic Area and the USA. Data is only disclosed if the country in question ensures an adequate level of data protection or if the disclosure is safeguarded by appropriate guarantees, such as standard contractual clauses.

Retention

We keep personal data only for as long as is required for the purposes described or as long as statutory retention obligations exist.

Security

We take appropriate technical and organisational measures to protect your personal data against loss, misuse and unauthorised access. This website is transmitted encrypted (HTTPS). However, we cannot guarantee complete protection against all risks.

Children's data

Our offering is not directed at children. We do not knowingly collect personal data from children under 16. If we become aware of such data, we delete it.

Your rights

Under the Swiss Data Protection Act (DSG), you have in particular the right to information about the data we hold about you, and to have it corrected or deleted, unless statutory retention obligations require otherwise. To do so, contact erde@milchstrasse.lu.

Complaints

If you believe that we are not processing your personal data lawfully, you can lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern.

Changes

We may amend this privacy policy as needed. The version published on this website applies.

Last updated: July 2026