Privacy policy

Last updated: 27 August 2026

This privacy policy explains which personal data we process when you visit our website and place an order in our online shop, for what purpose we do so, and what rights you have.

As a Swiss company that also delivers into the European Union, we comply both with the Swiss Federal Act on Data Protection (FADP) and with the General Data Protection Regulation of the EU (GDPR). Where the two frameworks use different terminology, we mean the same thing.

1. Controller

The controller responsible for data processing on this website is:

Pamir Trading GmbH
Stöckenstrasse 28
8903 Birmensdorf
Switzerland

Email: info@pamirfinefibers.ch
Phone: +41 62 558 75 07

The shop is operated under the brand Pamir Fine Fibers.

Representative in the EU

[To be completed: name and address of the representative under Art. 27 GDPR, once appointed.]

Data protection officer

We are not required to appoint a data protection officer. Please address your requests to the contact details above.

2. Legal bases

We only process personal data where we can rely on a legal basis. Under the GDPR these are in particular:

• Performance of a contract (Art. 6(1)(b) GDPR) — to process your order, delivery, payment and returns, and to answer your enquiries.
• Legal obligation (Art. 6(1)(c) GDPR) — in particular commercial and tax retention obligations.
• Legitimate interests (Art. 6(1)(f) GDPR) — for the secure and stable operation of the website, to prevent misuse and fraud, and to improve what we offer.
• Consent (Art. 6(1)(a) GDPR) — for example for our newsletter. You can withdraw consent at any time with effect for the future.

Under Swiss law we process personal data on the basis of the FADP, following the principles of good faith, proportionality and purpose limitation.

3. What data we process

• Contact and master data — name, billing and delivery address, email address, telephone number.
• Contract and order data — items ordered, order number, order date, order history, returns.
• Payment data — the payment method chosen, payment status, transaction reference. We never see full credit card numbers.
• Account data — if you open a customer account: login details and saved addresses.
• Communication data — the content of your enquiries by email, telephone or contact form.
• Technical data — IP address, date and time of access, pages viewed, browser type and version, operating system, referring URL.

4. Shop system and hosting

Our online shop runs on the Shopify platform. For customers outside North America the provider is Shopify International Limited, Dublin, Ireland; the parent company is Shopify Inc., based in Ottawa, Canada.

Shopify provides the technical infrastructure and processes the data listed above on our behalf. We have concluded a data processing agreement with Shopify under Art. 28 GDPR. The legal bases are performance of the contract and our legitimate interest in a secure and reliable shop.

Canada is covered by an adequacy decision of the European Commission. Where Shopify uses sub-processors in third countries without an adequacy decision, this is based on the European Commission's Standard Contractual Clauses or an equivalent mechanism.

Further information can be found in Shopify's privacy policy for consumers.

5. Payment processing

We use Shopify Payments to process payments. Depending on your selection, this includes credit cards, TWINT, PayPal, Apple Pay and Google Pay.

You enter your payment details directly with the relevant payment service provider. That provider processes them under its own responsibility and passes on to us only what we need in order to allocate and book the payment — such as the payment method, the status and a transaction reference. Full card numbers are never disclosed to us.

The legal basis is performance of the contract. The privacy terms of the respective provider apply in addition.

6. Shipping and logistics

In order to deliver your order, we pass your name, the delivery address and — where needed for delivery notifications — your email address or telephone number to the transport and logistics company engaged for the shipment. We ship from warehouses in Switzerland and Germany.

For deliveries crossing a customs border, we transmit the information legally required for the customs declaration to the competent authorities and to the customs declarant.

The legal bases are performance of the contract and compliance with legal obligations.

7. Customer account

You can order without creating an account. If you do open a customer account, we store your login, address and order data so that you do not have to enter it again with every order and can view your order history.

You can have your account deleted at any time. Completed orders are not affected, to the extent that statutory retention obligations apply.

8. Newsletter

We send our newsletter using Shopify Email, a service of the Shopify companies named above.

Sign-up uses the double opt-in procedure: after you register, you receive an email in which you confirm your subscription. This ensures that nobody can enter someone else's address. We log the sign-up and the confirmation so that we can demonstrate consent.

The legal basis is your consent. You can unsubscribe at any time — using the unsubscribe link at the end of every message, or by emailing us. After you unsubscribe we remove your address from the distribution list; we retain the record of your original consent for as long as it is needed to defend against legal claims.

Separately from this, we send you messages that form part of processing your order, such as the order confirmation and the shipping notification. These are not advertising and cannot be unsubscribed from.

9. Cookies and similar technologies

Cookies are small text files stored by your browser. We use:

• Strictly necessary cookies — the shop does not work without them. These cover the shopping cart, session, login, language setting and the security and fraud prevention features of the checkout. The legal basis is our legitimate interest in operating the shop; no consent is required for these.
• Statistics cookies — Shopify uses these to collect aggregated usage figures (see section 10). In the EU we set them only where you have given your consent.

You can configure your browser to refuse cookies, to accept them only after asking you, and to delete cookies already stored. If you disable necessary cookies, parts of the shop will no longer work.

10. Audience measurement

We want to understand how our shop is used so that we can improve it. For this we use:

• Shopify Analytics — the reporting built into the platform. It shows us visitor numbers, pages viewed, traffic sources and sales. The analysis is aggregated; we do not build profiles of individual people from it.
• Google Search Console and Bing Webmaster Tools — these tools show us which search terms our pages appear for in search results. They evaluate aggregated search data only and do not set any cookies on our website.

The legal basis is our legitimate interest in designing our offering to meet demand, and — in the EU, for cookies requiring consent — your consent.

A web analytics service involving personal tracking, such as Google Analytics, is not currently in use. Should we introduce such a service in future, we will say so here in advance and obtain your consent where this is required.

11. Server log files

When you access our website, technical access data is recorded automatically and stored in log files: IP address, date and time, the page requested, the volume of data transferred, browser type and version, operating system and referring URL.

This data serves secure operation, error analysis and defence against attacks. It is not combined with other data sources. The legal basis is our legitimate interest.

12. Contacting us

If you write to us by email, telephone or via the contact form, we process the information you provide in order to answer your request and to deal with any follow-up questions.

The legal basis is performance of the contract where your enquiry relates to an order, and otherwise our legitimate interest in responding. We delete the data once the matter has been dealt with, unless statutory retention obligations apply.

13. Recipients of your data

We only pass on personal data where this is necessary to perform the contract, where you have consented, or where we are legally obliged to do so. Recipients are in particular:

• Shopify as the operator of the shop platform
• Payment service providers
• Transport, logistics and customs service providers
• Our fiduciary, accounting and the tax authorities, within the scope of legal obligations
• IT service providers who support us in running the business

We have concluded appropriate agreements with service providers that process data on our behalf. We do not sell your data.

14. Transfers abroad

We are based in Switzerland. From an EU perspective, processing in Switzerland is regarded as processing in a country with an adequate level of data protection; the same applies from a Swiss perspective to the EEA.

Where data is transferred to further countries, we ensure an adequate level of protection — through an adequacy decision, the European Commission's Standard Contractual Clauses or the clauses recognised by the Swiss Federal Data Protection and Information Commissioner, or another mechanism provided for by law.

15. Retention periods

We retain personal data only for as long as it is required for the relevant purpose or as statutory retention obligations require.

Business and accounting records are subject to statutory retention periods of up to ten years. Data we process on the basis of consent is deleted once that consent is withdrawn, unless other retention obligations apply.

16. Your rights

Within the scope of applicable law you have the following rights:

• Access — you can find out whether and which data we process about you.
• Rectification — you can have inaccurate data corrected.
• Erasure — you can request deletion, unless a retention obligation prevents it.
• Restriction — you can have processing restricted in certain cases.
• Data portability — you can receive the data you have provided in a commonly used format.
• Objection — you can object to processing based on a legitimate interest. You can object to direct marketing at any time without giving reasons.
• Withdrawal of consent — at any time with effect for the future. The lawfulness of processing carried out until then remains unaffected.

An informal message to info@pamirfinefibers.ch is sufficient. We may verify your identity before acting on a request.

Complaints

You can lodge a complaint with a supervisory authority at any time:

• Switzerland: Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern
• EU and EEA: the data protection authority of your place of residence or work, or of the place of the alleged infringement

17. Data security

This website uses SSL/TLS encryption throughout. You can recognise this by “https://” in the address bar and by the padlock symbol in your browser. While encryption is active, the data you send us cannot be read by third parties.

We also take appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access. However, no transmission over the internet can be guaranteed to be completely secure.

18. Unsolicited advertising

We hereby expressly object to the use of contact details published as part of our legal notice obligations for the purpose of sending advertising that has not been expressly requested.

19. Changes to this privacy policy

We update this privacy policy when our services, the tools we use or the legal situation change. The version published on this page is the one that applies.