Get more information

Privacy Policy

Effective Date: April 9, 2026
  1. Introduction
    2. Agregia AG (hereinafter “we,” “us,” “our,” or “Company”) is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data in accordance with the Swiss Federal Act on Data Protection (FADP) and its implementing ordinances.

    This Privacy Policy applies to our website (https://cameos.ch) and all related services.
    For more information about our use of cookies and similar technologies, please refer to our Cookie Policy.
    For company and contact details, see our Legal Notice.

    We may amend this Privacy Policy at any time. The version published on this website is the version currently applicable. Where required by law, we will obtain your renewed consent.
  2. EU and UK Representative
    3. Agregia AG does not currently maintain an EU or UK representative under GDPR Article 27. Such representation is not required as the company is not targeting EU/UK data subjects with active goods or services offerings, and is not conducting large-scale systematic monitoring of individuals in the EU/UK territory.
    Should Agregia AG establish operations in the EU/UK or begin targeted processing of EU/UK residents, an Article 27 representative will be appointed and this section will be updated accordingly.
  3. Legal Basis for Data Processing
    4. Under the FADP, processing personal data is generally permitted if it complies with the principles of data processing (Article 6 FADP). We process your personal data based on the following legal justifications:
    1. Consent
      2. We obtain your explicit consent before processing data in specific cases, such as:
      • Sensitive personal data
      • High-risk profiling or automated decision-making
      • Cross-border transfers to countries without adequate data protection
      • Marketing communications and promotional activities
      • Behavioral tracking and retargeting
      Consent Withdrawal:
      You may withdraw consent at any time by either deleting the consent cookies through your browser settings or directly with the Cookie Preference link in the footer.
      Withdrawal does not affect the validity of processing that occurred prior to withdrawal.
    2. Contract Performance
      3. Processing necessary to fulfill a contract with you or take pre-contractual measures, including:
      • Order processing and fulfillment
      • Payment processing
      • Account management
      • Customer support
    3. Legal Obligation
      4. Processing required to comply with Swiss law or regulatory requirements, such as:
      • Commercial register and tax obligations
      • Anti-money laundering (AML) checks
      • Financial reporting and audits
      • Law enforcement requests
    4. Legitimate Interests and Strictly Necessary Cookies (EU)
      5. Processing necessary for our legitimate interests under Swiss law, provided they do not override your rights:
      • Fraud prevention and cybersecurity
      • Service improvement and analytics (non-profiling)
      • Business administration
      • Direct marketing to existing customers

      For EU users: Technical cookies essential for website functionality (language settings, session management, shopping cart) are strictly necessary and exempt from consent under ePrivacy Directive Article 5(3).
    5. Vital Interests
      6. Processing necessary to protect the life or physical integrity of a person.
  4. Categories of Personal Data Collected
    1. Data You Provide Directly
      2. When you interact with cameos.ch, you may provide:
      • Identity information: Name, date of birth, username, password, identification documents
      • Contact details: Email, phone number, postal and billing addresses
      • Financial information: Payment card details, bank account information, payment preferences
      • Profile preferences: Interests, feedback, survey responses, wishlist items
      • Transaction history: Purchase records, order details, delivery addresses, returns
      • Communications: Messages, inquiries, support tickets, correspondence
    2. Data Automatically Collected
      3. When you use cameos.ch, we automatically collect:
      • Technical data: IP address, browser type, operating system, device identifiers, advertising IDs
      • Usage data: Pages visited, time spent, navigation paths, product views, search queries, referral sources
      • Location data: Approximate location from IP address (for shipping costs and market analysis)
      • System logs: Server logs, error reports, support interaction records
    3. Data from Third Parties
      4. We may receive personal data from:
      • Payment processors: Transaction verification, fraud indicators, payment status
      • Shipping partners: Delivery status, tracking information, address validation
      • Analytics platforms: Aggregated usage statistics, campaign performance
      • Customer support tools: Support records, chat logs, ticket history
      • Public databases: Commercial register, sanctions lists (for AML compliance)
      • Social media: When you interact with our content (comments, shares, follows)
  5. Purposes of Data Processing
    1. Service Provision and Transaction Processing
      2. Delivering products, processing orders, managing subscriptions, handling returns
      Legal Basis: Contractual performance
      Data Categories: Identity, contact, financial, transaction, technical data
      Retention: During active use + 10 years
    2. Account Management and Security
      3. Creating accounts, authentication, security verification, password management
      Legal Basis: Contractual performance
      Data Categories: Identity, contact, technical data
      Retention: Duration of account use + 3 years after closure
    3. Payment Processing and Billing
      4. Processing payments, managing invoices, handling refunds, fraud prevention
      Legal Basis: Contractual performance and legal obligation
      Data Categories: Identity, contact, financial, transaction data
      Retention: 10 years
    4. Customer Support and Communication
      5. Responding to inquiries, technical support, service notifications (order confirmations, shipping updates)
      Legal Basis: Contractual performance and legitimate interests
      Data Categories: Identity, contact, communication, transaction data
      Retention: 3 years after final interaction
    5. Legal Compliance and Regulatory Obligations
      6. Complying with commercial law, tax law, anti-money laundering regulations, legal requests
      Legal Basis: Legal obligation
      Data Categories: Identity, contact, transaction, financial data
      Retention: As required by law (typically 5-10 years for financial records)
    6. Marketing Communications (with Consent)
      7. Sending newsletters, promotional offers, product recommendations, seasonal campaigns
      Legal Basis: Consent
      Data Categories: Identity, contact, profile, usage data
      How to Opt-Out: Use the unsubscribe link in each email or contact us (see Section 2)
      Retention: Until you unsubscribe + 6 months (for list hygiene)
    7. Service Analytics and Improvement
      8. Purpose: Analyzing usage patterns, improving website functionality, developing new features
      Legal Basis: Legitimate interests (Article 31(1)(e) FADP)
      Data Categories: Technical data, usage data (anonymized where possible)
      Retention: 13 months, then anonymized
    8. Fraud Prevention and Cybersecurity
      9. Purpose: Detecting and preventing fraud, securing systems, preventing unauthorized access, protecting against cyber threats
      Legal Basis: Legitimate interests and legal obligation (Article 31(1)(c), (e) FADP)
      Data Categories: Technical, usage, identity data, payment information
      Retention: Until threat is resolved + 90 days
  6. Your Rights
    7. Under the Swiss FADP (Art. 25–29) and, where applicable, the GDPR (Art. 15–22), you have the following rights regarding your personal data:
    • Access: request confirmation of whether we process your data and obtain a copy.
    • Rectification: request correction of inaccurate data.
    • Erasure: request deletion of your data (subject to legal retention obligations).
    • Restriction: request restricted processing under certain conditions.
    • Portability: receive your data in a structured, commonly used, machine-readable format.
    • Objection: object to processing based on legitimate interests or for direct marketing.

    To exercise any of these rights, contact: privacy@agregia.ch. You also have the right to lodge a complaint with the FDPIC (Switzerland) or the relevant EU supervisory authority.
  7. Web Analytics and Tracking Technologies
    8. We use or may use web analytics tools, such as Google Analytics or similar technologies, to understand how visitors interact with our website. These tools may collect data such as pages visited, session duration, and approximate location.

    For EU/EEA users, analytics cookies require your consent via our cookie banner. For details on specific cookies set, their purposes, and retention periods, see our Cookie Policy.

    You can manage your cookie preferences at any time via the Cookie Preferences link in the footer or through your browser settings.
  8. Children's Privacy
    9. Our website is not directed at children under 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.
  9. Governing Law and Jurisdiction
    10. This Privacy Policy is governed by Swiss law. Disputes shall be subject to the exclusive jurisdiction of the courts of Zug, Canton of Zug, Switzerland.