Privacy policy
Last updated: October 2026
1. Data controller
AMS Kasilov
3027 Bern, Switzerland
Contact: contact form · full contact details in the Impressum
Website: ams-models.ch
UID: CHE-326.878.129
AMS Kasilov (“AMS”, “we”, “us”) is the controller responsible for the processing of your personal data in connection with our online shop at ams-models.ch.
2. Applicable law
We process personal data in accordance with the Swiss Federal Act on Data Protection (nDSG / DSG) and, where applicable, the EU General Data Protection Regulation (GDPR).
3. What data we collect
We collect personal data only to the extent necessary to operate the online shop and fulfil your orders:
| Category | Data collected | Purpose |
|---|---|---|
| Order data | Name, delivery address, e-mail, phone (optional), order details, payment reference | Order processing, shipping, customer communication |
| Account data | Name, e-mail, password (hashed) | Customer account management (optional — account creation is not required to place an order) |
| Payment data | Payment method, transaction reference | Payment processing (card details are handled entirely by the payment provider — AMS never sees or stores full card numbers) |
| Communication data | E-mail address, message content | Responding to enquiries, support requests |
| Technical data | IP address, browser type, device info, pages visited | Website functionality, security, analytics (via Shopify) |
4. Legal basis for processing
- Contract performance — processing necessary to fulfil your order (Art. 31 nDSG)
- Legitimate interest — fraud prevention, website security, improving our services
- Consent — where you have opted in (e.g. marketing e-mails, optional cookies)
- Legal obligation — tax and accounting requirements under Swiss law
5. Third-party service providers
We share personal data with the following categories of service providers, solely for the purposes described:
| Provider | Purpose | Data shared |
|---|---|---|
| Shopify Inc. (Canada) | E-commerce platform hosting, order management | Order data, account data, technical data |
| Payment providers (TWINT, PostFinance, Visa/Mastercard via Shopify Payments, PayPal) | Payment processing | Payment data, order amount |
| Swiss Post | Parcel delivery and tracking | Name, delivery address, phone (for delivery notification) |
Where data is transferred outside Switzerland (e.g. Shopify in Canada), we ensure adequate data protection safeguards are in place in accordance with the nDSG.
6. Cookies
Our website uses cookies that are essential for the online shop to function (shopping cart, session management, fraud prevention). These do not require consent.
We may also use analytics cookies (via Shopify Analytics) to understand how visitors use our site. You can manage cookie preferences in your browser settings.
7. Data retention
- Order data: retained for 10 years after the transaction as required by Swiss commercial and tax law (OR Art. 958f)
- Account data: retained for as long as the account is active; deleted upon request
- Technical/analytics data: retained for up to 12 months
- Communication data: retained for as long as necessary to resolve the enquiry, then deleted
8. Your rights
Under the Swiss nDSG, you have the following rights regarding your personal data:
- Right of access — request information about what data we hold about you
- Right to rectification — request correction of inaccurate data
- Right to deletion — request deletion of your data, subject to legal retention obligations
- Right to data portability — receive your data in a machine-readable format
- Right to object — object to data processing based on legitimate interest
To exercise any of these rights, contact us via our contact form. We will respond within 30 days.
9. Data security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. Our website uses SSL/TLS encryption for all data transmission. Payment processing is handled by PCI-DSS compliant providers.
10. Changes to this policy
We may update this privacy policy from time to time. The current version is always available at ams-models.ch/policies/privacy-policy. Material changes will be communicated via the website.
11. Supervisory authority
If you believe your data protection rights have been violated, you may file a complaint with the Federal Data Protection and Information Commissioner (FDPIC):
www.edoeb.admin.ch