Privacy Policy

Rhein 1905Last updated: April 2025

1. Introduction

Rhein 1905 (hereinafter "we", "our" or "the Company") operates an online cigar sales website.

We place great importance on the protection of your personal data and are committed to processing it in accordance with theFederal Data Protection Act (FADP)and its implementing ordinance (IPO), which came into effect on September 1, 2023.

This privacy policy informs you about the nature of the data we collect, the purposes of their processing, their retention period, and your rights.

2. Data Controller

Rhein 1905: Rue du Mont-Blanc 3, 1201 Geneva, Switzerland - info@rheincigars.ch - www.rhein1905.ch

3. Collected Personal Data

We collect the following categories of data:

a) Customer account data

• First and last name
• Email address
• Password (stored in encrypted form)
• Postal address
• Phone number (optional)
• Date of birth (for age verification)

b) Order data

• Shipping and billing address
• Cart contents and purchase history
• Payment information (processed directly by our payment provider; we do not store credit card data)
• Order number and status

c) Newsletter data

• Email address
• Language of communication
• Content preferences (if provided)
• Registration and unregistration date

d) Technical data

• IP address
• Browser type and operating system
• Pages visited and duration of visit (via analytical cookies, with your consent)

4. Purposes and legal bases of processing

5. Sale of tobacco products — specific provisions

In accordance with theFederal Law on Protection Against Tobacco (LPTab)and the regulations on the remote sale of tobacco products, we carry out anage verificationbefore any delivery. For this purpose, we may need to collect and process your date of birth or an identification document. This data is used exclusively for legal compliance purposes.

6. Data sharing with third parties

We do not sell or rent your personal data to third parties. However, we may share it with the following categories of recipients, strictly within the framework of the purposes mentioned above:

• Logistics and delivery providers(for the delivery of your orders)
• Payment providers(e.g., Stripe, PayPal, or equivalent — secure transaction processing)
• Email/newsletter service providers(e.g., Mailchimp, Klaviyo, or equivalent)
• Website host(data storage on secure servers)
• Competent authorities, in case of legal obligation

All our subcontractors are bound by data processing agreements compliant with the DPA.

7. Data transfer outside of Switzerland

If data is transferred to countries that do not have an adequate level of protection recognized by the Federal Data Protection Officer (FDPIC), we ensure that appropriate safeguards are in place (standard contractual clauses, certification, etc.).

8. Retention period

9. Your rights

In accordance with the LPD, you have the following rights:

• Right of access: to obtain confirmation that data concerning you is being processed and to receive a copy.
• Right to rectification: to have inaccurate or incomplete data corrected.
• Right to erasure: to request the deletion of your data, subject to legal retention obligations.
• Right to data portability: to receive your data in a structured, machine-readable format.
• Right to object: to object to processing based on legitimate interests, including for direct marketing purposes.
• Right to withdraw your consent: at any time, without retroactive effect.

To exercise your rights, contact us at:info@rheincigars.ch

We will respond to your request within30 days.

10. Cookies

Our site uses cookies. You can manage your preferences via the consent banner displayed during your first visit.

• Strictly necessary cookies: cart functionality, session — no consent required.
• Analytical cookies: audience measurement (e.g. Google Analytics) — consent required.
• Marketing cookies: targeted advertising — consent required.

You can change your preferences at any time from your browser settings or our preference center.

11. Data Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, or destruction, including: SSL/TLS encryption, access control, regular backups, and pseudonymization where applicable.

12. Complaints

If you believe that the processing of your data violates the LPD, you have the right to file a complaint with theFederal Data Protection and Transparency Officer (PFPDT) : www.edoeb.admin.ch

13. Changes to this Policy

We reserve the right to modify this policy at any time. The version in effect is the one published on our site. In the event of a substantial change, we will inform you by email or via a notification on the site.

Rhein 1905 — [www.rhein1905.ch]