Privacy Policy
Effective Date: April 5, 2026
- Introduction
- EU and UK Representative
- Legal Basis for Data Processing
- Consent
- Contract Performance
- Legal Obligation
- Legitimate Interests and Strictly Necessary Cookies (EU)
- Vital Interests
- Categories of Personal Data Collected
- Data You Provide Directly
- Data Automatically Collected
- Data from Third Parties
- Purposes of Data Processing
- Service Provision and Transaction Processing
- Account Management and Security
- Payment Processing and Billing
- Customer Support and Communication
- Legal Compliance and Regulatory Obligations
- Marketing Communications (with Consent)
- Service Analytics and Improvement
- Fraud Prevention and Cybersecurity
- Your Rights
- Web Analytics and Tracking Technologies
- Children's Privacy
- Governing Law and Jurisdiction
Agregia AG (hereinafter “we,” “us,” “our,” or “Company”) is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data in accordance with the Swiss Federal Act on Data Protection (FADP) and its implementing ordinances.
This Privacy Policy applies to our website (https://cameos.ch) and all related services.
For more information about our use of cookies and similar technologies, please refer to our Cookie Policy.
For company and contact details, see our Legal Notice.
We may amend this Privacy Policy at any time. The version published on this website is the version currently applicable. Where required by law, we will obtain your renewed consent.
This Privacy Policy applies to our website (https://cameos.ch) and all related services.
For more information about our use of cookies and similar technologies, please refer to our Cookie Policy.
For company and contact details, see our Legal Notice.
We may amend this Privacy Policy at any time. The version published on this website is the version currently applicable. Where required by law, we will obtain your renewed consent.
Agregia AG does not currently maintain an EU or UK representative under GDPR Article 27. Such representation is not required as the company is not targeting EU/UK data subjects with active goods or services offerings, and is not conducting large-scale systematic monitoring of individuals in the EU/UK territory.
Should Agregia AG establish operations in the EU/UK or begin targeted processing of EU/UK residents, an Article 27 representative will be appointed and this section will be updated accordingly.
Should Agregia AG establish operations in the EU/UK or begin targeted processing of EU/UK residents, an Article 27 representative will be appointed and this section will be updated accordingly.
Under the FADP, processing personal data is generally permitted if it complies with the principles of data processing (Article 6 FADP). We process your personal data based on the following legal justifications:
We obtain your explicit consent before processing data in specific cases, such as:
• Sensitive personal data
• High-risk profiling or automated decision-making
• Cross-border transfers to countries without adequate data protection
• Marketing communications and promotional activities
• Behavioral tracking and retargeting
• Sensitive personal data
• High-risk profiling or automated decision-making
• Cross-border transfers to countries without adequate data protection
• Marketing communications and promotional activities
• Behavioral tracking and retargeting
Consent Withdrawal:
You may withdraw consent at any time by either deleting the consent cookies through your browser settings or directly with the Cookie Preference link in the footer.
Withdrawal does not affect the validity of processing that occurred prior to withdrawal.
Withdrawal does not affect the validity of processing that occurred prior to withdrawal.
Processing necessary to fulfill a contract with you or take pre-contractual measures, including:
• Order processing and fulfillment
• Payment processing
• Account management
• Customer support
• Order processing and fulfillment
• Payment processing
• Account management
• Customer support
Processing required to comply with Swiss law or regulatory requirements, such as:
• Commercial register and tax obligations
• Anti-money laundering (AML) checks
• Financial reporting and audits
• Law enforcement requests
• Commercial register and tax obligations
• Anti-money laundering (AML) checks
• Financial reporting and audits
• Law enforcement requests
Processing necessary for our legitimate interests under Swiss law, provided they do not override your rights:
• Fraud prevention and cybersecurity
• Service improvement and analytics (non-profiling)
• Business administration
• Direct marketing to existing customers
For EU users: Technical cookies essential for website functionality (language settings, session management, shopping cart) are strictly necessary and exempt from consent under ePrivacy Directive Article 5(3).
• Fraud prevention and cybersecurity
• Service improvement and analytics (non-profiling)
• Business administration
• Direct marketing to existing customers
For EU users: Technical cookies essential for website functionality (language settings, session management, shopping cart) are strictly necessary and exempt from consent under ePrivacy Directive Article 5(3).
Processing necessary to protect the life or physical integrity of a person.
When you interact with cameos.ch, you may provide:
• Identity information: Name, date of birth, username, password, identification documents
• Contact details: Email, phone number, postal and billing addresses
• Financial information: Payment card details, bank account information, payment preferences
• Profile preferences: Interests, feedback, survey responses, wishlist items
• Transaction history: Purchase records, order details, delivery addresses, returns
• Communications: Messages, inquiries, support tickets, correspondence
• Identity information: Name, date of birth, username, password, identification documents
• Contact details: Email, phone number, postal and billing addresses
• Financial information: Payment card details, bank account information, payment preferences
• Profile preferences: Interests, feedback, survey responses, wishlist items
• Transaction history: Purchase records, order details, delivery addresses, returns
• Communications: Messages, inquiries, support tickets, correspondence
When you use cameos.ch, we automatically collect:
• Technical data: IP address, browser type, operating system, device identifiers, advertising IDs
• Usage data: Pages visited, time spent, navigation paths, product views, search queries, referral sources
• Location data: Approximate location from IP address (for shipping costs and market analysis)
• System logs: Server logs, error reports, support interaction records
• Technical data: IP address, browser type, operating system, device identifiers, advertising IDs
• Usage data: Pages visited, time spent, navigation paths, product views, search queries, referral sources
• Location data: Approximate location from IP address (for shipping costs and market analysis)
• System logs: Server logs, error reports, support interaction records
We may receive personal data from:
• Payment processors: Transaction verification, fraud indicators, payment status
• Shipping partners: Delivery status, tracking information, address validation
• Analytics platforms: Aggregated usage statistics, campaign performance
• Customer support tools: Support records, chat logs, ticket history
• Public databases: Commercial register, sanctions lists (for AML compliance)
• Social media: When you interact with our content (comments, shares, follows)
• Payment processors: Transaction verification, fraud indicators, payment status
• Shipping partners: Delivery status, tracking information, address validation
• Analytics platforms: Aggregated usage statistics, campaign performance
• Customer support tools: Support records, chat logs, ticket history
• Public databases: Commercial register, sanctions lists (for AML compliance)
• Social media: When you interact with our content (comments, shares, follows)
Delivering products, processing orders, managing subscriptions, handling returns
Legal Basis: Contractual performance
Data Categories: Identity, contact, financial, transaction, technical data
Retention: During active use + 10 years
Legal Basis: Contractual performance
Data Categories: Identity, contact, financial, transaction, technical data
Retention: During active use + 10 years
Creating accounts, authentication, security verification, password management
Legal Basis: Contractual performance
Data Categories: Identity, contact, technical data
Retention: Duration of account use + 3 years after closure
Legal Basis: Contractual performance
Data Categories: Identity, contact, technical data
Retention: Duration of account use + 3 years after closure
Processing payments, managing invoices, handling refunds, fraud prevention
Legal Basis: Contractual performance and legal obligation
Data Categories: Identity, contact, financial, transaction data
Retention: 10 years
Legal Basis: Contractual performance and legal obligation
Data Categories: Identity, contact, financial, transaction data
Retention: 10 years
Responding to inquiries, technical support, service notifications (order confirmations, shipping updates)
Legal Basis: Contractual performance and legitimate interests
Data Categories: Identity, contact, communication, transaction data
Retention: 3 years after final interaction
Legal Basis: Contractual performance and legitimate interests
Data Categories: Identity, contact, communication, transaction data
Retention: 3 years after final interaction
Complying with commercial law, tax law, anti-money laundering regulations, legal requests
Legal Basis: Legal obligation
Data Categories: Identity, contact, transaction, financial data
Retention: As required by law (typically 5-10 years for financial records)
Legal Basis: Legal obligation
Data Categories: Identity, contact, transaction, financial data
Retention: As required by law (typically 5-10 years for financial records)
Sending newsletters, promotional offers, product recommendations, seasonal campaigns
Legal Basis: Consent
Data Categories: Identity, contact, profile, usage data
How to Opt-Out: Use the unsubscribe link in each email or contact us (see Section 2)
Retention: Until you unsubscribe + 6 months (for list hygiene)
Legal Basis: Consent
Data Categories: Identity, contact, profile, usage data
How to Opt-Out: Use the unsubscribe link in each email or contact us (see Section 2)
Retention: Until you unsubscribe + 6 months (for list hygiene)
Purpose: Analyzing usage patterns, improving website functionality, developing new features
Legal Basis: Legitimate interests (Article 31(1)(e) FADP)
Data Categories: Technical data, usage data (anonymized where possible)
Retention: 13 months, then anonymized
Legal Basis: Legitimate interests (Article 31(1)(e) FADP)
Data Categories: Technical data, usage data (anonymized where possible)
Retention: 13 months, then anonymized
Purpose: Detecting and preventing fraud, securing systems, preventing unauthorized access, protecting against cyber threats
Legal Basis: Legitimate interests and legal obligation (Article 31(1)(c), (e) FADP)
Data Categories: Technical, usage, identity data, payment information
Retention: Until threat is resolved + 90 days
Legal Basis: Legitimate interests and legal obligation (Article 31(1)(c), (e) FADP)
Data Categories: Technical, usage, identity data, payment information
Retention: Until threat is resolved + 90 days
Under the Swiss FADP (Art. 25–29) and, where applicable, the GDPR (Art. 15–22), you have the following rights regarding your personal data:
• Access: request confirmation of whether we process your data and obtain a copy.
• Rectification: request correction of inaccurate data.
• Erasure: request deletion of your data (subject to legal retention obligations).
• Restriction: request restricted processing under certain conditions.
• Portability: receive your data in a structured, commonly used, machine-readable format.
• Objection: object to processing based on legitimate interests or for direct marketing.
To exercise any of these rights, contact: privacy@agregia.ch. You also have the right to lodge a complaint with the FDPIC (Switzerland) or the relevant EU supervisory authority.
• Access: request confirmation of whether we process your data and obtain a copy.
• Rectification: request correction of inaccurate data.
• Erasure: request deletion of your data (subject to legal retention obligations).
• Restriction: request restricted processing under certain conditions.
• Portability: receive your data in a structured, commonly used, machine-readable format.
• Objection: object to processing based on legitimate interests or for direct marketing.
To exercise any of these rights, contact: privacy@agregia.ch. You also have the right to lodge a complaint with the FDPIC (Switzerland) or the relevant EU supervisory authority.
We use or may use web analytics tools, such as Google Analytics or similar technologies, to understand how visitors interact with our website. These tools may collect data such as pages visited, session duration, and approximate location.
For EU/EEA users, analytics cookies require your consent via our cookie banner. For details on specific cookies set, their purposes, and retention periods, see our Cookie Policy.
You can manage your cookie preferences at any time via the Cookie Preferences link in the footer or through your browser settings.
For EU/EEA users, analytics cookies require your consent via our cookie banner. For details on specific cookies set, their purposes, and retention periods, see our Cookie Policy.
You can manage your cookie preferences at any time via the Cookie Preferences link in the footer or through your browser settings.
Our website is not directed at children under 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.
This Privacy Policy is governed by Swiss law. Disputes shall be subject to the exclusive jurisdiction of the courts of Zug, Canton of Zug, Switzerland.