Privacy Policy

Controller

The controller within the meaning of data protection laws, in particular the General Data Protection Regulation (GDPR), is:

ToastCode KLG

Bärenlochweg 2

9465 Sennwald

Switzerland

UID: CHE-300.435.658

Email: hello@toast-code.com

Authorized representatives: Raphael Stolz, Herbert Hart (50% share each, authorized to represent individually)

General Information

The protection of your personal data is a matter of special importance to us. We process personal data exclusively within the scope of the applicable data protection regulations, in particular the GDPR as well as the applicable data protection laws of Switzerland.

This privacy policy informs you about the nature, scope, and purpose of the processing of personal data in connection with the use of our website cleero.app and the Shopify app “Cleero – Payment Matching”.

Website Hosting

Our website is operated via the Framer service. When you visit the website, Framer processes technical access data, in particular IP address, time of access, browser type, and operating system. This data is technically necessary to ensure the operation, stability, and security of the website.

Framer uses infrastructure from third-party providers, which may result in data transfers to third countries. The transfer is based on appropriate safeguards, in particular the conclusion of Standard Contractual Clauses pursuant to Art. 46 GDPR.

Cookies and Consent Management

Our website uses cookies and comparable technologies. On your first visit to the website, a cookie banner is displayed through which you can voluntarily consent to the use of cookies that are not technically necessary. Technically non-essential cookies are only set after your express consent.

You can withdraw or adjust your consent at any time.

Analytics and Tracking Tools

If you have given your consent, we use the following analytics and marketing tools:

Google Analytics and Google Tag Manager to analyze user behavior and optimize our website.

Meta Pixel (Facebook and Instagram) to measure advertising success and to serve ads in a targeted manner.

As part of these services, personal data may be processed in third countries, in particular the USA. The transfer is based on Standard Contractual Clauses as well as additional technical and organizational protective measures.

Newsletter

For sending newsletters, we use the MailerLite service. In particular, the email address and, where applicable, the name are processed. Registration takes place using a double opt-in procedure. You can unsubscribe from the newsletter at any time via the unsubscribe link in each email.

Contact and Support

When you contact us, for example by email, via a contact form, or through the HelpCrunch live chat service, we process the personal data you provide in order to handle your request.

Support requests may be documented and managed internally in a ticketing system. This serves efficient processing as well as quality assurance.

Shopify App “Cleero” – Data Processing

Cleero is a Shopify app for the automated assignment and matching of incoming payments with orders.

In the course of using the app, the following personal data is processed in particular: order numbers, payment status, payment amounts, customer names, customers’ email addresses, and bank-related transaction data such as transaction ID, date, amount, payment reference, and – depending on the bank – information about the counterparty.

Order and matching data are stored. Bank transaction data are stored solely for the respective purpose, insofar as this is necessary for automated payment matching. No processing for other purposes takes place.

The app is provided exclusively via the Shopify App Store and operated within the Shopify admin area.

Use of Salt Edge

For retrieving account data and incoming payments, we use the Salt Edge service. Authentication takes place exclusively via the respective bank (ASPSP) within the process provided by Salt Edge. We never receive login credentials for bank accounts.

Salt Edge is based in the United Kingdom. The United Kingdom is considered a third country with an adequacy decision by the European Union. Processing takes place exclusively for the purpose of payment matching.

Disclosure of Data

Personal data is disclosed exclusively to Shopify as the platform operator, to Salt Edge as the technical service provider for payment matching, and to other service providers used for hosting, support, or newsletter distribution. No disclosure for advertising purposes to unrelated third parties takes place.

Storage Duration

Personal data is stored only as long as is necessary for the respective processing purposes or as long as statutory retention obligations exist.

Rights of Data Subjects

Data subjects have the right to information about the personal data concerning them, to rectification of inaccurate data, erasure, restriction of processing, data portability, and withdrawal of any consent given. They also have the right to lodge a complaint with a competent data protection supervisory authority.

Changes to This Privacy Policy

We reserve the right to amend this privacy policy in order to adapt it to changed legal or technical conditions.