Privacy Policy

Last updated: 28 October 2026

Article 1: Controller and scope

This policy explains how we process your personal data when you visit Joujou.ch, place an order, subscribe to our newsletter or contact us. The controller is:

Condomplanet SàRL – Joujou.ch
Route de Crans 81, 1978 Lens, Switzerland
E-mail: serviceclients(@)joujou.ch – Tel.: 0840 568 568

We process your data in accordance with the Swiss Federal Act on Data Protection (FADP) and, where applicable, the European Union General Data Protection Regulation (GDPR).

Article 2: Data processed and purposes

We process the data you provide to us (name, delivery and billing address, e-mail, phone number, order contents, customer account if any) in order to process and deliver your order, handle payment, provide customer service, manage returns and comply with our legal obligations. The legal bases are performance of the contract, our legal obligations and our legitimate interest (Art. 6(1)(b), (c) and (f) GDPR).

We do not sell your data. It is only shared with the service providers named in this policy, to the extent necessary for their tasks.

Order data is kept for as long as required by the contract and then for the statutory retention periods (generally 10 years for accounting records under the Swiss Code of Obligations). Data used for marketing is kept until you unsubscribe or object.

Article 3: Shop hosting (Shopify)

Our shop is hosted on the Shopify platform (Shopify International Ltd., Ireland). Shopify processes browsing, account and order data on our behalf. Transfers to Canada and the USA may occur; these are covered by adequacy decisions, the EU-US / Swiss-US Data Privacy Framework or standard contractual clauses.

Article 4: Delivery

For delivery, we share your name, delivery address and, where applicable, your e-mail or phone number with Swiss Post Ltd so that it can deliver your parcel and send you tracking information. The contents of your order are not disclosed, and our parcels are shipped in neutral packaging.

Article 5: Payment

Depending on the payment method you choose, the data required for payment is shared with the relevant provider: Worldline (credit cards, TWINT, PostFinance), PayPal (Europe) S.à r.l. et Cie, S.C.A. (Luxembourg) or CembraPay AG (Switzerland) for payment by invoice. For payment by invoice, CembraPay carries out an identity and credit check. Card data is encrypted and never stored by us. Purchases appear on your statement as CDPL Online-store.

Article 6: Server log files

On every visit, the servers automatically record technical data (IP address, date and time, page visited, browser, referring page). This data is used to ensure the operation and security of the website (Art. 6(1)(f) GDPR) and is not combined with other sources.

Article 7: Cookies and consent

We use cookies and similar technologies. Necessary cookies (cart, login, language, security) are essential for the shop to work. Analytics and marketing cookies are only used in line with the choices you make in our cookie banner, which you can change at any time. You can also delete or block cookies in your browser settings; some features of the website may then no longer be available.

Article 8: Google Ads, Google Analytics and conversion measurement

We use Google Ads (including remarketing and conversion tracking) and Google Analytics, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). These services allow us to measure the effectiveness of our ads, analyse use of the website and show our ads to people who have already visited our website. Usage data (pages viewed, products viewed, purchases, cookie identifiers, truncated IP address) is processed for this purpose.

For conversion measurement, we use server-side tracking via the provider Addingwell (France), which forwards event data to Google on our behalf. Data may be transferred to the USA; Google is certified under the EU-US Data Privacy Framework.

This processing is based on the consent you give via the cookie banner, which you can withdraw at any time. You can also manage ad personalisation at adssettings.google.com.

Article 9: Newsletter, e-mails and back-in-stock alerts (Klaviyo)

If you subscribe to our newsletter or ask to be notified when a product is back in stock, we use your e-mail address (and, where applicable, your phone number and language) to send you these messages, based on your consent. We also use your e-mail address for messages relating to your order or your cart.

These messages are sent via Klaviyo, Inc. (Boston, USA), which processes the data on our behalf and measures opens and clicks to improve our mailings. The transfer to the USA is covered by the EU-US Data Privacy Framework and/or standard contractual clauses.

You can unsubscribe at any time via the link in every e-mail or by writing to us. Withdrawing your consent does not affect the lawfulness of processing carried out before the withdrawal.

Article 10: Integration of the Trusted Shops Trustbadge and other widgets

Trusted Shops widgets are integrated on this website to display Trusted Shops services (e.g. the trustmark and collected reviews) and to offer Trusted Shops services to buyers after an order.

This serves to safeguard our overriding legitimate interests in optimal marketing of our offer by enabling secure shopping, in accordance with Art. 6(1)(f) GDPR. The Trustbadge and the services it promotes are offered by Trusted Shops SE, Subbelrather Straße 15C, 50823 Cologne, Germany (hereinafter "Trusted Shops"), with whom we are joint controllers under Art. 26 GDPR. Below we inform you of the essential content of this arrangement in accordance with Art. 26(2) GDPR.

When you interact with the Trustbadge AI+, session cookies are created to store the login status and to display the so-called "Welcome Layer", which shows details of our shop (company information, reviews, availability of buyer protection) and the #trstd secret. A cookie is stored to recognise logged-in users and is kept for a maximum of 400 days after login. In addition, session cookies are stored to send push notifications when using the app, provided the user has allowed them. This is necessary for Trusted Shops to provide you with the requested digital service. Trusted Shops is the controller for data processing during interaction with the Trustbadge AI+.

Within this joint controllership, we ask you to preferably contact Trusted Shops SE with any data protection questions and to exercise your rights, using the contact details given in the Trusted Shops privacy policy. You may nevertheless always contact the controller of your choice; your request will, if necessary, be forwarded to the other controller.

1. Data processing when integrating the Trustbadge / other widgets

The Trustbadge is provided by a US-based CDN (Content Delivery Network) provider. An adequate level of data protection is ensured by an adequacy decision of the European Commission for the USA; US service providers are generally certified under the EU-US Data Privacy Framework (www.dataprivacyframework.gov). Where they are not, standard contractual clauses have been concluded as appropriate safeguards.

When the Trustbadge is displayed, the server automatically records a server log file containing your IP address, the date and time of display, the amount of data transferred and the requesting provider (log data). The IP address is anonymised immediately after collection so that the stored data cannot be linked to you. The anonymised data is used in particular for statistical purposes and error analysis.

2. Data processing after the order is completed

After the order is completed, the order information (order total, order number, purchased product if applicable) and your e-mail address, hashed using a one-way cryptographic function, are transmitted to Trusted Shops on the basis of Art. 6(1)(f) GDPR. This serves to check whether you are already registered for Trusted Shops services and is therefore necessary for our and Trusted Shops' overriding legitimate interests in providing the buyer protection linked to the specific order and the review services. If so, further processing takes place in accordance with the contractual agreement between you and Trusted Shops. If you are not yet registered, you will be given the opportunity to do so; further processing is then also governed by the contractual agreement with Trusted Shops. If you do not register, all transmitted data is automatically deleted by Trusted Shops and can no longer be linked to you.

Trusted Shops uses service providers for hosting, monitoring and logging on the basis of Art. 6(1)(f) GDPR to ensure trouble-free operation. In this context, processing may take place in third countries (USA and Israel). An adequate level of protection is ensured in each case by an adequacy decision of the European Commission; US service providers are generally certified under the EU-US Data Privacy Framework, otherwise standard contractual clauses have been concluded as appropriate safeguards.

Article 11: Customer reviews (Judge.me)

After your purchase, we may invite you by e-mail to review the products you ordered. We use the Judge.me service for this, to which we transmit your first name, e-mail address and the products purchased. If you publish a review, it is displayed on our website with the name you provided. The legal basis is our legitimate interest in collecting genuine reviews (Art. 6(1)(f) GDPR); you can object to these invitations at any time.

Article 12: Search, wishlist and bundle offers

Product search on our website is provided by Doofinder S.L. (Spain), which processes your search terms and technical data to display relevant results. The wishlist is provided by Swym Corporation (USA), and bundle offers and free gifts by the BOGOS app; these services process the products you add and, if you are logged in, your customer ID. This processing is based on our legitimate interest in offering a functional shop (Art. 6(1)(f) GDPR).

Article 13: Customer service

When you contact us via our contact form, by e-mail or by phone, we process your contact details and the content of your request solely to respond to it, using our e-mail and support tools. This data is deleted once it is no longer needed, subject to statutory retention periods.

Article 14: Your rights

You have the right to obtain information free of charge about the data we process about you (right of access), to have it corrected, erased or restricted, to object to its processing, to withdraw any consent given and to receive your data in a commonly used format (data portability), within the limits of the law. To exercise these rights, write to us at serviceclients(@)joujou.ch.

You may also lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC, www.edoeb.admin.ch) or, if you live in the European Union, with the supervisory authority of your country.

Article 15: Security

We take appropriate technical and organisational measures (in particular SSL/TLS encryption) to protect your data against loss, destruction, unauthorised access or alteration. However, absolute security cannot be guaranteed when data is transmitted over the Internet.

Article 16: Changes

We may update this policy at any time, in particular if our services or the law change. The version published on this website is authoritative.