Privacy policy


Privacy Policy of RYUN BONSAI BISCHOFBERGER

Version 1.2 – 15 October 2026

About Us

This privacy policy ("Privacy Policy") explains how we process and protect your personal data when you use this Website or our services provided via https://ryunbonsai.com/ (together, the "Services").

These Services are operated by Ryun Bonsai, Bischofberger, Zugerstrasse 40, 8810 Horgen (the "Company", "we", "our", or "us"). The Company is the controller for the data processing described below.

Unless otherwise defined in this Privacy Policy, the definitions used have the same meaning as in the Swiss Federal Act on Data Protection (FADP) or the EU General Data Protection Regulation (GDPR).

1. Personal Data We Collect

We may collect or receive personal information for a number of purposes connected with our business operations when you use our Services:

  • Usage and analytics information (e.g., identifiers, numbers of clicks, tracking data)
  • Contact details (e.g., name, address, phone number, birth date)
  • Login details (e.g., password, username, session)
  • Payment details (e.g., billing information, credit card details)
  • Request details (e.g., details and content of your inquiries)
  • Website visitor details (e.g., IP address, logfiles, terminal ID)
  • Transaction details (e.g., items you view, add to cart, purchase, return, or cancel)

There is no obligation to provide your personal data. However, our Services cannot be provided if you do not supply data strictly necessary for performing the contract between you and us.

2. How We Collect Personal Data

We collect information when users interact with our Services, including when they take certain actions within it.

Directly:

  • Via our Website and electronic communication
  • When you use our Services
  • When you provide services to us
  • When you correspond with us electronically
  • When you browse, complete a form, or make an inquiry

Indirectly:

  • Through public sources
  • From public registers (e.g., commercial registers), news articles, and internet searches
  • When business customers share personal data with us as part of a professional services engagement
  • From external Service Providers (see section 5)

Our legal basis for collecting and using personal data depends on the data we collect and the specific purposes for which we collect it.

Contract — To perform our contractual obligations or take steps linked to a contract with you:

  • To provide customer support
  • To set up and manage your account and verify your credentials
  • To provide our Services
  • To process and deliver your orders, including payment, invoicing and shipping
  • To manage your bookings for workshops and appointments

Consent — Based on your freely given consent at the time you provided your personal data:

  • To analyse, improve, personalise, and monitor usage of our Services and communications
  • To place non-essential cookies and other tools on your browser
  • To provide news, special offers, newsletters, and general information about our goods and services

Legitimate Interests — Based on our assessment that processing is fair, reasonable, and does not override your rights:

  • To place essential, technically necessary cookies and tools on your browser
  • To develop new services
  • To maintain and improve our Services, and to detect, prevent, and address security threats

Legal Obligations — To meet regulatory and public interest obligations:

  • To notify you about changes to our Services and this Privacy Policy
  • To comply with applicable regulations and legislation
  • For the legal enforcement of claims and rights
  • To comply with statutory retention obligations under accounting and tax law

4. Data Retention

We retain personal data for as long as it is needed for the purposes for which it was collected, and in line with legal, regulatory, or contractual requirements. After this period, we delete or fully anonymise your personal data.

5. Data Recipients

We engage third-party companies ("Service Providers") to facilitate our Services, analyse usage, or perform necessary services such as payment processing and IT infrastructure. These parties access your personal data only to the extent necessary to perform their tasks.

Types of Service Providers who may access your personal data:

  • Professional advisers such as accountants and lawyers
  • Third parties engaged in the course of your matter, such as banks, payment providers, KYC/AML providers, and postal or courier services
  • IT and software service providers, in particular Shopify (online shop, checkout, payment and chat), Avada (cookie consent), Sufio (invoicing), Cowlendar (bookings) and Swiss Post (shipping)
  • Third parties who assist with client insights and marketing

6. Data Transfers

We and/or our Service Providers may transfer and process your personal data in the following regions:

  • Switzerland, EU and EEA
  • Canada and USA (Shopify and its affiliates, GeoJS)
  • Vietnam (Avada)

We may use Service Providers located in third countries (outside the EU, EEA, or Switzerland) whose level of data protection may not correspond to that of the EU or Switzerland. In such cases, we safeguard your data through:

  • Transfers to countries recognised by the Federal Council or the European Commission as providing adequate protection
  • Standard data protection model clauses, binding corporate rules, or other contractual obligations ensuring appropriate protection

Where no adequacy decision or appropriate safeguards exist, there is a risk that authorities in the third country (e.g., intelligence services) may access the transferred data, and enforceability of your data subject rights cannot be guaranteed.

7. Data Disclosure

We may disclose your personal data in the good faith belief that such action is necessary:

  • To comply with a legal obligation (e.g., if required by law or in response to valid requests by public authorities such as a court or government agency)
  • To protect the security of our Services and defend our rights or property
  • To prevent or investigate possible wrongdoing in connection with us

8. Data Security

We take reasonable technical and organisational security measures to protect your stored data against manipulation, loss, or unauthorised third-party access. Our security measures are continually adapted to technological developments.

Our employees and engaged service providers are required to maintain confidentiality and comply with applicable data protection legislation. Access to personal data is granted only to the extent necessary to carry out their respective tasks.

Please note that no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee absolute security. We recommend using antivirus software, a firewall, and similar tools to safeguard your system.

9. Your Rights

To exercise any of the rights below, please contact us at the address above or by email at contact@ryunbonsai.com. We may ask you to verify your identity before responding.

  • Right of access — You may request a copy of your personal data, which we will provide in electronic form.
  • Right to amendment — You may ask us to correct our records if you believe they contain incorrect or incomplete information.
  • Right to withdraw consent — You may withdraw consent to data processing at any time with effect for the future, including opting out of marketing communications. To stop receiving emails, click the 'unsubscribe' link in any email or contact us at contact@ryunbonsai.com.
  • Right to erasure — You may request deletion of your personal data when it is no longer necessary for the purposes collected or when it was unlawfully processed.
  • Right to restriction of processing — You may request that we restrict processing of your personal data where you believe it is inaccurate, our processing is unlawful, or we no longer need it but cannot delete it due to a legal obligation.
  • Right to portability — You may request that we transmit your personal data to another controller in a standard format, where processing is based on consent or contract performance.
  • Right to object — Where processing is based on our legitimate interests, you may object on grounds relating to your particular situation. We will comply unless we have a compelling legal basis that overrides your interests or need the data to establish or defend a legal claim.
  • Right to lodge a complaint — You may appeal to a data protection supervisory authority. In Switzerland: the Federal Data Protection and Information Commissioner (edoeb.admin.ch). In the EU/EEA: the authority in your country of residence, workplace, or place of the alleged infringement (edpb.europa.eu).

10. Cookies and Other Tools

Essential tools are required for the operation of our online shop (e.g., shopping cart and checkout) and are used on the basis of our legitimate interest. Non-essential tools, such as Shopify Analytics, Shopify Marketing and Shopify Smart Pricing, are only used with your consent, which you can give, refuse or revoke at any time with effect for the future via "Cookie settings" on our website. The following list shows the tools used, their providers, storage periods and purposes.

Essential tools

Shopify

Our online shop is operated on Shopify, a service provided by Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"). Shopify provides the technical infrastructure of our shop, including the shopping cart, checkout, customer accounts and payment processing. To this end, Shopify sets cookies that are strictly necessary for the operation of the shop, for example to keep the contents of your shopping cart, to process your order securely and to prevent fraud. Personal data may be processed on servers of Shopify and its affiliates in Canada and the USA.

Tools used:

  • _shopify_essential (1 year): used for core store functions such as session management, checkout and protection against manipulation
  • cart (2 weeks): stores the contents of your shopping cart
  • cart_currency (2 weeks): stores the currency of your shopping cart
  • localization (1 year): stores your country and language selection to localise the shop
  • _shopify_test (1 minute): checks whether your browser accepts cookies
  • discount_code (session): keeps a discount code for the next checkout
  • shopify_pay (1 year): keeps you signed in to Shop Pay at checkout if you use it
  • login_with_shop_finalize (5 minutes): completes a sign-in with Shop
  • __Host-Http-shop_binding (3 hours): links a sign-in with Shop to your browser session

To know more about Shopify's cookie usage, consult its privacy policy and cookie policy.

Avada Cookie Consent

Our website uses Avada Cookie Consent, a service provided by Avada, 102 Tran Phu, Ha Dong, Hanoi, 100000, Vietnam ("Avada"). Avada displays our cookie banner, asks website visitors for consent to the use of non-essential tools and stores the choice made. To show the banner appropriate to the visitor's location, Avada determines the approximate location (country and region) from the IP address using the geolocation service GeoJS (get.geojs.io). For this purpose, the IP address is transmitted to these providers. Vietnam and the USA do not have an adequate level of data protection; please see section 6 "Data Transfers".

Tools used:

  • avada_cookie_consent (1 year): stores your consent decision
  • integration (1 day): stores the configuration of the consent integrations
  • avadaGeoData (local storage, approx. 1 day): stores your approximate location to display the correct banner
  • avadaBlockerScope (local storage, approx. 1 day): stores whether consent rules apply to your region
  • avada_cookie_impression_queue (local storage, persistent): temporarily stores banner display events

To know more about Avada's data processing, consult its privacy policy.

Shopify Inbox (chat)

Our website uses Shopify Inbox, a chat function provided by Shopify (see above), which allows you to contact us directly via the chat window. If you use the chat, the content of your messages and the contact details you provide are processed in order to answer your inquiry.

Tools used:

  • shopify-chat-nudge-path, shopify-chat-nudge-pages, shopify-chat-nudge-start (session storage, session): store the state of the chat window during your visit

Cowlendar Booking

For bookings of workshops and appointments, our website uses the booking app Cowlendar, a service of the provider "Booking Appointment Cowlendar". When you make a booking, the details you enter (e.g. name, e-mail address, selected date) are processed to manage your booking. At the time of our review, the app did not set any cookies before a booking was made.

Non-essential tools

Shopify Analytics

With your consent, Shopify (see above) collects statistical information about how visitors use our shop, e.g. pages viewed, time of visit and interactions, so that we can analyse and improve our shop. If you refuse consent, these tools are not set.

Tools used:

  • _shopify_analytics (1 year): stores analytics data for storefront and checkout pages

Shopify Marketing

With your consent, Shopify (see above) stores information that is used for marketing purposes, e.g. to measure the effectiveness of marketing campaigns. If you refuse consent, these tools are not set.

Tools used:

  • _shopify_marketing (1 year): stores marketing data for storefront and checkout pages

Shopify Smart Pricing

With your consent, Shopify (see above) uses an app pixel of its price optimisation app "Smart Pricing". The pixel collects information about visits and purchases in our shop (e.g. pages viewed, referral traffic and campaign parameters) so that the effect of prices can be evaluated and our product prices optimised. If you refuse consent, the pixel does not collect any data.

Tools used:

  • App pixel "Smart Pricing" (runs in Shopify's protected pixel environment, no separate cookies of its own known at the time of review)

We will update this section if we add or remove tools on our website. Status of review: 15 October 2026.

Our Services may contain links to third-party websites or apps. When you click such a link, you will be directed to that third party's site. We have no control over their content, privacy policies, or practices.

We maintain presences on social networks to communicate with customers and share information about our Services. If you have an account on the same network, information you make available there may be visible to us. For the legal basis of data processing carried out by social networks under their own responsibility, please refer to their respective privacy policies:

12. Newsletter

We send newsletters and other notifications by email and through other communication channels, and may use third parties to deliver them.

You must expressly consent to receive newsletters unless otherwise permitted by law. We use a double opt-in process for email consent — you will receive a confirmation email with a link you must click to activate your subscription, preventing unauthorised sign-ups. We may log such consents including IP address, date, and time.

Newsletters may contain tracking pixels or web links that record whether a message was opened and which links were clicked. We use this data to measure performance and improve our communications in terms of effectiveness, user-friendliness, security, and reliability.

You may unsubscribe at any time by clicking the unsubscribe link in any newsletter or by contacting us directly.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We encourage you to review it periodically. Changes take effect when posted on this page.

14. Contact Us

If you have any questions about this Privacy Policy, please get in touch:

Ryun Bonsai, Bischofberger Zugerstrasse 40, 8810 Horgen contact@ryunbonsai.com