Last updated: 27.10.2026
This privacy policy explains which personal data we process in connection with the website jamuh.ch, orders and our newsletter. It is governed by the Swiss Federal Act on Data Protection (FADP). Where the EU General Data Protection Regulation (GDPR) applies in a given case, its provisions apply in addition.
1. Controller
Markus Cajöri, Jamuh
Röschibachstrasse 24
8037 Zürich
Switzerland
[email protected]
For any privacy request, an email to this address is enough.
2. Summary
- We set no tracking or advertising cookies.
- Our visitor statistics (Umami) are anonymous and work without cookies.
- External content such as YouTube or Vimeo videos and the store map loads only after you allow it with a click.
- Orders are paid through Stripe. We never see your card details.
3. Visiting the website
Hosting and server log files
The website is hosted by [[host, country]]. For each request, the server stores technically necessary data: IP address, date and time, page requested, referrer, browser and operating system. We use this data to run the site securely and reliably, and delete it after [[14]] days.
Cloudflare
The website is delivered through the network of Cloudflare, Inc. (USA). Cloudflare protects against attacks and speeds up delivery. In doing so it processes your IP address and technical connection data. Cloudflare may set a technically necessary cookie (__cf_bm) to detect bots. Legal basis under the GDPR: legitimate interest (Art. 6(1)(f) GDPR).
Visitor statistics (Umami)
We measure website usage with Umami. Umami sets no cookies and stores no IP addresses. It records only aggregated data such as pages viewed, referrer, device type, browser and country. Individual visitors cannot be identified. Umami is operated by 8am GmbH, Switzerland, on [[its own server in Switzerland/the EU]]. The data is not shared with third parties.
Fonts
All fonts are stored on our own server. Loading a page makes no connection to font providers.
Videos (Bunny Stream)
We deliver our own videos through Bunny Stream by BunnyWay d.o.o. (Slovenia). When you play a video, your IP address is sent to Bunny. According to Bunny, no tracking cookies are set.
External content only after a click (YouTube, Vimeo, Google Maps etc.)
Where third-party content is embedded, we first show a placeholder. The content loads from the provider only when you click “Load content”. The provider then receives your IP address and may set cookies. If you choose “always load”, we store that choice only in your browser (localStorage), not on our side.
You can review and revoke your permissions here:
Store map (OpenFreeMap)
The map on the “Jamuh stores” page loads map tiles from OpenFreeMap by Hyperknot Software Kft. (Hungary), delivered through Cloudflare. Your IP address is sent to these servers. According to OpenFreeMap, its logs contain no IP addresses except temporarily in case of abuse. The store list works without the map.
The “Near me” function uses your device’s location only after you allow it in your browser. Distances are calculated in your browser only; your location is not sent to us. “Route” links open Google Maps only when clicked.
Cookies and local storage
We set only technically necessary cookies:
| Name | Purpose | Duration |
|---|---|---|
pll_language | Remembers the selected language | 1 year |
__cf_bm | Bot detection by Cloudflare | 30 minutes |
__stripe_mid, __stripe_sid | Fraud prevention for payments (order pages only) | 1 year / 30 minutes |
In your browser’s localStorage we store whether you closed the privacy notice and which external content you allowed. This data does not leave your device. You can delete cookies and local storage in your browser at any time.
4. Orders and subscriptions
When you order through our order or subscription form, we process your name, email address, phone number, delivery address, products ordered and amount. We use this data to process and deliver your order and to contact you. Legal basis under the GDPR: performance of a contract (Art. 6(1)(b) GDPR).
- Payment: Payment is handled by Stripe (Stripe Payments Europe Ltd., Ireland, and Stripe, Inc., USA). You enter your payment details directly with Stripe. We receive only the payment confirmation and the payment method. Stripe also processes data for fraud prevention.
- SMS order notification: For each new order we receive a text message with name, phone number, product and amount, sent via smstools ([[operator]], Belgium).
- Emails: We send order confirmations via [[Plunk, Belgium/EU]].
We keep order data for as long as statutory retention duties require (usually 10 years for accounting records, Art. 958f Swiss Code of Obligations).
5. Newsletter
For the newsletter we need your email address and, optionally, your name. Sign-up uses double opt-in: you receive an email to confirm your subscription. We store the time of sign-up and confirmation as proof.
We manage newsletter data with ntool [[on our own server, location]]. Emails are sent via Emailit ([[operator]], servers in the EU). [[We measure whether a newsletter was opened and which links were clicked, to improve the newsletter. For this, each email contains a tracking pixel and personalised links.]]
You can unsubscribe at any time via the link in every email or by writing to us. We then remove your data from the mailing list.
6. Contact by email
If you write to us, we process your details to answer your request. We delete the correspondence once it is no longer needed, unless retention duties apply.
7. Disclosure and transfers abroad
We do not sell data. We share data only with the service providers named above, who process it on our behalf. Some providers are based in the USA (Cloudflare, Stripe). For companies certified under the Swiss-U.S. Data Privacy Framework, the USA is considered to provide adequate data protection. Where no certification exists, we rely on the European Commission’s standard contractual clauses, as recognised by the Swiss FDPIC.
8. Your rights
You have the right to access your data, to have it corrected, deleted or handed over, and to object to processing. Where the GDPR applies, you also have the right to restrict processing, to data portability and to withdraw consent with effect for the future.
To exercise these rights, write to [email protected]. We may ask for proof of identity.
You may lodge a complaint with the competent supervisory authority. In Switzerland this is the Federal Data Protection and Information Commissioner (FDPIC), www.edoeb.admin.ch.
9. Security
The website is encrypted throughout via HTTPS. We take appropriate technical and organisational measures to protect your data against loss and unauthorised access.
10. Changes
We update this privacy policy when our data processing changes. The version published on this page applies.