Privacy policy

Privacy Policy

1. Controller
Responsible for data processing on this website:

Tutto Passa GmbH
Freiheitsgasse 12
9320 Arbon
Switzerland
Email: info@tuttopassamusic.com

2. General Information on Data Processing
We take the protection of your personal data very seriously. As we serve customers in both Switzerland and the EU (particularly Germany), we process your data based on the Swiss Data Protection Act (DSG) and, where applicable, the EU General Data Protection Regulation (GDPR).

3. Hosting
Our online shop is operated via Shopify (Shopify Inc., 151 O'Connor Street, Ground Floor, Ottawa, ON K2P 2L8, Canada). Canada is recognized by the EU Commission as a country with an adequate level of data protection. We have a data processing agreement with Shopify.

4. Collection and Processing of Personal Data
The following data may be processed as part of the ordering process or use of our shop:
- Name, address, email address, phone number
- Payment data (via third-party providers)
- IP address, device and browser information
- Order data
- Newsletter sign-up data

5. Payment Service Providers
We use PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg) to process payments. Payment processing takes place directly via PayPal; we do not receive complete payment data.

6. Newsletter
Sign-up for our newsletter takes place via the Shopify function integrated into our online shop, based on your consent. You may withdraw your consent at any time, e.g. via the unsubscribe link in the newsletter.

7. International Data Transfer
Since some of our service providers (e.g. Shopify, PayPal) are located outside Switzerland or the European Economic Area, cross-border data transfers may occur. This only happens in compliance with appropriate safeguards (e.g. standard contractual clauses).

8. Your Rights
You have the right to access, rectification, erasure, restriction of processing, data portability, objection, and withdrawal of consent given. Please contact: info@tuttopassamusic.com

9. Data Retention Period
Personal data is only stored for as long as necessary to fulfill the respective purposes or as required by statutory retention periods.

10. Changes to this Privacy Policy
We reserve the right to amend this privacy policy. The current version can always be found on this page.