Privacy Policy
Last updated: July 2026
1. Data Controller
[FIRST NAME LAST NAME]
MIKA NUT — [FULL ADDRESS]
Email: contact@mikanut.com
As an individual enterprise without a designated DPO, the owner of MIKA NUT can be contacted at the above address for any requests related to your personal data.
2. Data Collected
As part of your order and your browsing on www.mikanut.com, we collect the following data:
Identification and contact data: first name, last name, email address, postal address, phone number (if provided).
Order data: products ordered, amounts, purchase history.
Payment data: transactions are processed by Shopify Payments, PayPal, and TWINT. MIKA NUT does not store any banking or payment card data.
Browsing data: IP address, browser type, pages visited, via Shopify cookies.
3. Purposes and Legal Bases for Processing
| Purpose | Legal Basis |
|---|---|
| Order processing and delivery | Performance of a contract (Art. 6.1.b GDPR) |
| Invoicing and accounting obligations | Legal obligation (Art. 6.1.c GDPR) |
| After-sales service and complaints | Performance of a contract / Legitimate interest |
| Sending transactional emails | Performance of a contract |
| Site improvement (Shopify Analytics) | Legitimate interest (Art. 6.1.f GDPR) |
| Direct marketing (if consent given) | Consent (Art. 6.1.a GDPR) |
4. Data Recipients
Your data may be transferred to the following service providers:
- Shopify Inc. (hosting, payment, store management) — United States, covered by EU Standard Contractual Clauses
- PayPal (payment processing) — United States, covered by EU Standard Contractual Clauses
- TWINT AG (payment processing) — Switzerland
- Postal carriers (Swiss Post, DHL, etc.) — for delivery
No data is sold to third parties.
5. Retention Period
- Order and invoicing data: 10 years (Swiss legal obligation, CO Art. 958f)
- Browsing data: according to Shopify's cookie policy (generally 13 months maximum)
- Marketing data (if consent): until consent is withdrawn
6. Your Rights
In accordance with the GDPR (EU customers) and the FADP (Swiss customers, effective September 1, 2023), you have the following rights:
- Right to access your personal data
- Right to rectify inaccurate data
- Right to erasure ("right to be forgotten")
- Right to restriction of processing
- Right to data portability
- Right to object to processing
- Right to withdraw your consent at any time
To exercise these rights: contact@mikanut.com — Response within 30 days.
EU Customers: You can lodge a complaint with the supervisory authority in your country (e.g., CNIL in France, BfDI in Germany, APD in Belgium).
Swiss Customers: You can contact the Federal Data Protection and Information Commissioner (FDPIC): www.edoeb.admin.ch
7. International Transfers
Shopify Inc. is based in the United States. Data transfers are governed by the Standard Contractual Clauses (SCCs) approved by the European Commission, in accordance with Article 46 of the GDPR.