Privacy Policy

1. Responsible entity

The entity responsible for processing personal data in connection with this website and the online shop is:

MIROMI Swiss Essentials GmbH
Espenweg 5a
CH-9220 Bischofszell
Switzerland

Telephone: +41 76 490 33 99
Email: info@miromi.ch
Website: https://www.miromi.ch
UID: CHE-161.680.393

This privacy policy is governed by the Swiss Federal Act on Data Protection (FADP). To the extent that the European Union's General Data Protection Regulation (GDPR) applies, in particular to offers made to persons in the European Economic Area, its provisions also apply.

Drogovita Holding GmbH is a shareholder of MIROMI Swiss Essentials GmbH. This shareholding alone does not establish any independent responsibility under data protection law. Personal data is disclosed to it only if this is necessary for a specific operational service, legally permissible, and contractually regulated.

For warehousing, shipping, or returns services, the order and contact details required for these services may be transmitted to Drogovita med GmbH and the respective shipping service providers used.

2. Personal data processed

We may process the following categories of personal data in particular:

  • Basic personal data such as name and form of address,

  • Contact details such as address, email address, and telephone number,

  • Order, contract, delivery, and return data,

  • Payment and transaction information,

  • Customer account and login details,

  • Content of inquiries, emails, and chat messages,

  • Information from ratings and product reviews,

  • Newsletter and marketing preferences,

  • Technical data such as IP address, browser, device, operating system, time of access, referrer URL, and pages visited,

  • Cookie identifiers and comparable online identifiers, as well as

  • Data on the use of and interaction with our website.

As a rule, we do not request particularly sensitive personal data. In particular, please do not send us health data unless this is necessary for your inquiry. We process information provided voluntarily only to handle the respective inquiry and in accordance with legal requirements.

3. Purposes of data processing

We process personal data in particular for the following purposes:

  • Operating, securing, and improving the website,

  • Presenting our range and products,

  • Processing orders, payments, deliveries, returns, and refunds,

  • Maintaining and administering customer accounts,

  • Responding to inquiries and providing customer service,

  • Fraud prevention and combating misuse,

  • Fulfilling statutory retention, information, and documentation obligations,

  • Sending newsletters and promotional communications with the corresponding consent,

  • Measuring reach, analyzing, and optimizing our website,

  • Conducting and evaluating advertising campaigns as well as

  • Obtaining and publishing product reviews.

Where the GDPR applies, processing is carried out in particular for the performance of the contract or the implementation of pre-contractual measures, compliance with legal obligations, on the basis of legitimate interests, or on the basis of your consent.

Legitimate interests include, in particular, the secure and efficient operation of the online shop, fraud prevention, improving our offerings, and communicating with customers.

Consent that has been granted may be withdrawn at any time with effect for the future. The lawfulness of processing carried out before the withdrawal remains unaffected.

4. Provision of the online shop by Shopify

Our online shop is operated through Shopify. The provider for merchants in Europe is generally:

Shopify International Limited
Ireland

Shopify processes, on our behalf, in particular technical usage data, customer account, contact, order, payment, and transaction data. Personal data from Switzerland and the European Economic Area is initially processed by Shopify International Limited in Ireland. As part of providing its services, data may also be processed by affiliated companies and subcontractors in other countries, particularly in Canada and the United States.

For certain enhanced Shopify services, Shopify may carry out individual data processing activities under its own responsibility under data protection law. Further information can be found in Shopify’s Privacy Policy. Privacy choices regarding Shopify can be made at https://privacy.shopify.com.

5. Orders, payments, shipping, and returns

When you place an order, we process the information required to conclude and execute the contract. This includes, in particular, your name, billing and delivery address, email address, telephone number, ordered products, order value, payment method, and transaction status.

Payment information is transmitted, depending on the payment method selected, to Shopify Payments and to the payment service providers displayed during checkout. Complete credit card details are generally processed by the respective payment service provider and not directly by us.

For delivery, we transmit the required information to the shipping company commissioned with the delivery. In the case of returns, the information necessary for assignment and processing may be transmitted to Drogovita med GmbH, Station 3, CH-9601 Lütisburg Station.

6. Customer account

If you create a customer account or use the account functions of Shopify or the shop, the account, contact, and order data you enter will be processed. This processing serves to provide the customer account, display orders, and simplify the processing of future orders.

You may request the correction or deletion of your customer account unless this is precluded by statutory retention obligations.

7. Contact and shop chat

If you contact us by email, contact form, telephone, or chat, we process your information to answer your inquiry and for any follow-up questions.

For the chat offered on the website, we use a Shopify chat function. Shopify may process messages, contact details, order information, and technical usage data. The chat may use artificial intelligence-based functions and generate incorrect responses. This does not automatically constitute legally binding declarations.

8. Newsletters and Klaviyo

We use Klaviyo for newsletters, email marketing, and certain functions for targeting website visitors. The provider is:

Klaviyo, Inc.
USA

In particular, email address, name, newsletter status, order information, interests, interactions with emails, visited pages, and cookie and device identifiers may be processed.

Advertising communications are sent only if the relevant consent or another legally permissible basis exists. You can unsubscribe at any time via the unsubscribe link in a message or by email to info@miromi.ch unsubscribe.

Further information can be found in Klaviyo's privacy policy.

9. Product reviews with Judge.me

We use the Judge.me service for product and shop reviews. The provider is:

Judge.me Ltd
United Kingdom

When you submit a review, your display name, email address, order details, review text, star rating, images or videos, and technical data may in particular be processed. Certain information may be used to verify whether a review originates from an actual customer.

The selected display name, rating, and voluntarily uploaded media may be displayed publicly. Your email address will not be displayed publicly.

For more information, please see the Judge.me Privacy Policy.

10. Google Tag Manager and Google services

We use Google Tag Manager to manage website tags. The provider for individuals in Switzerland and the European Economic Area is generally Google Ireland Limited. Google Tag Manager may process technical information such as IP addresses and browser and device information.

Through Google Tag Manager, analytics or marketing services such as Google Analytics or Google Ads may be integrated, depending on the current configuration and your consent settings. Where consent is required, the relevant services will only be activated after you have given your consent.

Google may also process data in the USA and other countries. For more information, please see the Google Privacy Policy.

11. Lead forms from Google Ads

If you submit contact details through a form in a Google ad, the information you enter will first be processed by Google and then transmitted to us.

We use this information to process your request and contact you as requested. It will only be used for newsletters or other advertising communications if you have given the relevant consent or another legal basis exists.

The storage and processing by Google are also governed by Google's privacy policy.

12. Protection against misuse through hCaptcha

To protect forms from automated entries, spam, and misuse, Shopify may use the hCaptcha service. The provider is:

Intuition Machines, Inc.
USA

In particular, the IP address, device and browser information, time and type of interaction, and other technical information may be processed. This processing serves to protect our website and prevent misuse.

For more information, please see the hCaptcha Privacy Policy.

13. Cookies and similar technologies

Our website uses cookies and similar technologies. Necessary cookies are used in particular to operate the shopping cart and checkout, facilitate login, ensure security, and store your privacy settings.

Analytics, personalization, and marketing technologies are used only with your consent where legally required. You can change or withdraw your selection at any time via the privacy settings offered on the website.

Disabling certain cookies may limit the functionality of the website.

14. Server log files

When you visit our website, technical data is collected automatically. This may include, in particular, the IP address, browser, operating system, device information, referrer URL, pages visited, and the date and time of access.

This data may be linked to individuals. It is processed to ensure the secure operation of the website, analyze errors, defend against attacks, and ensure functionality.

15. Recipients of personal data

Personal data may be disclosed, where necessary for the stated purposes, in particular to the following categories of recipients:

  • Hosting and shop providers,

  • IT, cloud, and security service providers,

  • Payment service providers and financial institutions,

  • Shipping, warehousing, and returns service providers,

  • Communication and newsletter providers,

  • Analytics, marketing, and advertising service providers,

  • Review platforms,

  • Trustees, legal advisers, and other professional advisers, as well as

  • Authorities and courts, where there is a legal obligation to do so.

As a general rule, service providers may process personal data only to the extent necessary and in accordance with contractual and statutory requirements.

16. Disclosure abroad

Some service providers and their subcontractors are located outside Switzerland or the European Economic Area. Personal data may therefore be processed in particular in the European Union, the United Kingdom, Canada, and the USA.

When disclosing data to countries without a recognized adequate level of data protection, we use appropriate safeguards where necessary. These include, in particular, recognized standard data protection clauses and corresponding contractual addenda. Where permitted, we may also rely on statutory exceptions or your express consent.

17. Retention period

We retain personal data only for as long as necessary for the respective purpose or as required by statutory retention obligations.

In particular, the following generally applies:

  • Order, contract, accounting, and invoicing records are generally retained for ten years in accordance with statutory requirements.

  • Inquiries and customer service correspondence are retained for as long as necessary to process them and for any potential legal claims.

  • Newsletter data is retained until you unsubscribe or withdraw your consent. Any required blocking record may then be retained for longer.

  • Security and log data are stored according to their necessity and the settings of the service providers used.

  • Reviews generally remain published until they are deleted or a legitimate deletion request is submitted.

After the retention period expires, data is deleted or anonymized unless legal or contractual reasons require further retention.

18. Data security

We and our service providers take appropriate technical and organizational security measures to protect personal data against loss, misuse, unauthorized access, alteration, and disclosure.

Our website uses SSL/TLS encryption. Nevertheless, no data transmission or electronic storage can be fully protected against all risks.

19. Rights of data subjects

Under applicable data protection law, you may assert the following rights in particular:

  • Information about the personal data processed,

  • Correction of inaccurate data,

  • Erasure or restriction of processing,

  • Provision or transfer of certain personal data,

  • Objection to certain processing activities,

  • Withdrawal of consents granted and

  • Lodging a complaint with a competent data protection supervisory authority.

These rights may be restricted due to statutory requirements, exceptions, or retention obligations.

To exercise your rights, contact us at info@miromi.chTo prevent unauthorized disclosures, we may require suitable proof of identity.

The competent Swiss supervisory authority is the Federal Data Protection and Information Commissioner (FDPIC). Where the GDPR applies, you also have the right to lodge a complaint with the competent data protection authority in the European Economic Area.

20. Automated decisions

As a rule, we do not make solely automated decisions that produce legal effects concerning you or similarly significantly affect you. If this occurs in an individual case, we will inform you in accordance with legal requirements.

21. Changes to this Privacy Policy

We may amend this Privacy Policy if our data processing activities, the services we use, or legal requirements change. The version published on this website at the relevant time shall apply.

As of: August 19, 2026