Revised version – July 2026 (replaces the 2020 version)

This Privacy Policy is provided in English for the convenience of English-speaking customers. The French version, "Politique de confidentialité," is the original and governing version; in the event of any discrepancy, the French version prevails.

​

1. Data Controller

Your Own Bread, Alexandra Russell, La Ruelle 3, 1163 Etoy (Vaud), Switzerland (the "Provider"), is the controller responsible for the processing of personal data collected in connection with its business (sale of products, public workshops, private lessons, corporate events, and private events), within the meaning of Art. 5 let. j of the Swiss Federal Act on Data Protection (FADP, RS 235.1).

For any question regarding this Policy or to exercise your rights, you may contact the Provider at the e-mail address shown on the website.

​

2. Data Collected

The Provider collects the following personal data, depending on the service concerned:

• identity and contact details (first and last name, e-mail address, postal address, phone number);

• order and booking data (products or services ordered, dates, amounts);

• payment data necessary to process the transaction (processed by the Provider's payment service provider, see Art. 5);

• information voluntarily provided by the Customer, in particular allergies or dietary restrictions reported for an event;

• technical browsing data automatically collected when visiting the website (see Art. 7, Cookies).
   

3. Purposes of Processing

Personal data is processed for the following purposes:

• processing and fulfillment of orders and bookings, including invoicing and payment management;

• organization and smooth running of workshops, lessons, and events, including taking into account reported food allergies;

• communication with the Customer regarding their order or booking;

• sending promotional communications (newsletter), where the Customer has consented;

• improvement and security of the website.
   

4. Retention Period

Personal data is retained for as long as necessary for the purposes for which it was collected, and is then destroyed or anonymized (Art. 6 para. 4 FADP), subject to retention periods required under Swiss accounting law (10 years for supporting documents and billing data, Art. 958f of the Swiss Code of Obligations).

​

5. Recipients and Processors

The Provider uses the following processors to perform its services:

• Wix.com, for website hosting, booking management, and online payment processing;

• where applicable, carriers and logistics providers, for delivery of shop products.

These providers process data only on behalf of the Provider and only to the extent necessary to perform their services, in accordance with Art. 9 FADP.

Data is neither sold nor transferred to third parties for advertising purposes.

​

6. Cross-Border Data Transfers

The technical infrastructure of Wix.com, a processor engaged by the Provider, involves the processing of personal data outside Switzerland, in particular in Ireland, within the European Economic Area, and in the United States. This transfer is governed by the Data Processing Agreement published by Wix.com, available at www.wix.com/about/privacy-dpa-users, which provides for contractual safeguards within the meaning of Art. 16 FADP. The Customer may obtain further information on these safeguards by contacting the Provider.

​

7. Cookies

The website uses technical cookies necessary for its operation (in particular, managing the shopping cart and bookings), as well as, where applicable, statistical and personalization cookies implemented by Wix.com as part of its own consent management tool, accessible via the banner displayed on first visiting the site. The Customer may change their cookie preferences at any time via this banner or their browser settings.

​

8. Promotional Communications

A Customer who has subscribed to the Provider's newsletter receives promotional communications by e-mail. Each message includes an unsubscribe link allowing the Customer to opt out of these communications at any time and free of charge, in accordance with Art. 3 para. 1 let. o of the Swiss Federal Act Against Unfair Competition (UCA, RS 241).

​

9. Rights of the Data Subject

In accordance with Art. 25 et seq. FADP, any person may request that the Provider:

• confirm whether personal data concerning them is being processed, and provide the information required under Art. 25 para. 2 FADP (identity of the controller, data processed, purpose, retention period, origin, recipients);

• correct inaccurate data (Art. 32 para. 1 FADP);

• erase or destroy data, or prohibit a specific processing activity, within the limits of Art. 32 para. 2 FADP;

• provide, in a commonly used electronic format, the data the person has personally provided to the Provider, or transmit it to another controller, under the conditions set out in Art. 28 FADP.

These rights may be exercised free of charge by contacting the Provider at the contact details set out in Article 1. A response is generally provided within 30 days (Art. 25 para. 7 FADP).

If the Customer believes that the processing of their personal data does not comply with applicable law, they may lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC), whose contact details are available at www.edoeb.admin.ch.

​

10. Data Security

The Provider implements appropriate technical and organizational measures to ensure an adequate level of security for personal data, having regard to the risk involved (Art. 8 FADP).

​

11. Amendment of This Policy

The Provider may amend this Privacy Policy at any time. The applicable version is the one published on the website on the date the data is collected.