Privacy policy

Last updated: October 30, 2026

Protecting your privacy and personal data is a top priority for FANTSYKA Institut de Beauté & Shop - Sugiez (operated by rjNet | rjScan.ch | Suisse Sàrl). This Privacy Statement transparently explains how we collect, process, utilize, and safeguard your data in full compliance with the revised Swiss Federal Act on Data Protection (revFADP / nLPD, SR 235.1) and the European Union General Data Protection Regulation (EU GDPR 2016/679) where applicable.

1. Data Controller

The designated data controller for this online store is:

2. Personal Data Collected

We collect only the personal information strictly required for fulfilling your orders and delivering bespoke aesthetic advice:

• Identity & Contact Information: Full name, email address, telephone numbers (landline / mobile), shipping and billing addresses.
• Customer Account Data: Username, order history, communication preferences, and authorized skincare protocol notes.
• Payment & Transaction Details: Purchased items, timestamp, transaction amounts, selected payment method (TWINT, PostFinance, credit card, PayPal). Note: No full credit card numbers or banking credentials are stored on our servers; transactions are encrypted and processed by PCI-DSS compliant providers.
• Technical Browsing Data: IP address, device type, browser model, pages viewed, and cookies.

3. Purposes of Data Processing

Your data is strictly processed for the following legitimate purposes:

• Order Fulfillment & Dispatch: Item assembly in our salon, invoicing, and domestic shipping via Swiss Post.
• Customer Service & Tailored Consultations: Assisting with inquiries, managing returns, and offering individual skincare recommendations.
• Security & Fraud Prevention: Authenticating payment transactions and maintaining online platform security.
• Communication: Transmitting necessary transactional messages (order receipts, parcel tracking). Marketing newsletters are sent solely upon prior express consent (with immediate one-click unsubscribe links).

4. Commitment Against Data Sale & Third-Party Transfers

Data transmission is restricted exclusively to trusted service providers essential to service delivery:

• E-Commerce Infrastructure & Hosting: Shopify Inc. (highest banking-grade encryption standards).
• Postal Carrier: Swiss Post for door-to-door delivery.
• Payment Processors: Authorized gateways (Wallee, PostFinance, TWINT, Shopify Payments) governed by stringent regulatory compliance.
• Legal Obligations: Solely upon mandatory orders issued by competent Swiss judicial authorities.

5. Data Security & Retention

We implement rigorous technical and organizational measures: end-to-end SSL/TLS (HTTPS) encryption and strictly regulated access limited to designated institute staff.

Your information is retained only as long as necessary to achieve its designated operational purposes and in full accordance with statutory Swiss record-keeping obligations (generally 10 years for accounting books under the Swiss Code of Obligations).

6. Cookies & Tracking Technologies

Our store relies on essential cookies required for core shopping functions (cart management, secure customer sign-in). Anonymized analytics cookies may be utilized to refine browsing ergonomics without ever profiling you individually. You may configure or reject cookies at any time via your browser preferences.

7. Your Legal Rights

Under the Swiss revFADP and GDPR, you are entitled to the following rights:

• Right of Access: Request disclosure of the personal data held about you.
• Right to Rectification: Demand correction of any inaccurate or incomplete records.
• Right to Erasure: Request permanent deletion of your data, subject to statutory bookkeeping preservation periods.
• Right to Data Portability: Receive your personal data in a commonly readable structured format.

To exercise any of these rights, please submit a written request accompanied by proof of identity to: contact+shop@fantsyka.ch. Requests are answered within the statutory 30-day Swiss timeframe.