Legal

Privacy policy

This website collects as little data as possible. Here you can read which data that is, what we need it for and what rights you have. It is based on the Swiss Federal Act on Data Protection (FADP).

Controller

Visiting the website

This website is hosted on GitHub Pages, a service of GitHub, Inc., San Francisco, USA. When you open a page, GitHub stores your IP address for security reasons. This data may be processed in the USA; GitHub is certified under the Swiss-U.S. Data Privacy Framework. How long GitHub keeps this data is set out in GitHub’s privacy statement.

Orders

You’ll soon be able to order from us online; this section applies once the shop is open. When you order in the shop, we receive your name, your email address, your delivery address, your phone number if you give it, and your comment, along with the order itself. We need these details to send your order, confirm it to you and reach you if there are any questions. We do not pass them on to anyone for their own purposes, and we do not sell them.

Payment is handled by our payment provider Stripe (Stripe Payments Europe, Limited, Dublin, Ireland), with TWINT or by card. For this, Stripe receives your order, your name and your email address and processes the payment details itself; we never see your card details. Stripe also processes data in the USA and is certified under the Swiss-U.S. Data Privacy Framework. In addition, please see Stripe’s privacy policy.

For shipping, Swiss Post receives your name and your delivery address.

On our side, orders are kept in the email inbox info@cascarup.ch on Microsoft 365 (Microsoft Corporation). Data may also be processed in the USA; Microsoft is certified under the Swiss-U.S. Data Privacy Framework.

We delete your details once the order is complete, and at the latest when the student company closes at the end of the 2026/27 school year; we keep records for our accounts for as long as the law requires.

Your basket is stored only in your own browser (local storage), so that it’s still there on your next visit. Your browser remembers the details you enter at checkout only while the tab is open, so that they’re still there if a payment is cancelled. Neither is sent to us until you pay.

Notification about participation certificates

As long as you can’t buy participation certificates online, you can join the waiting list. We then receive your first name, your surname, your e-mail address and the time of your consent. We use these details for one purpose only: to write to you as soon as the certificates are available online. We don’t pass them on to anyone for their own purposes and we don’t sell them.

Sign-up runs through the FormSubmit service (formsubmit.co) by Devro LABS. FormSubmit receives your details and your IP address, forwards them by email to info@cascarup.ch and sends you a confirmation. FormSubmit gives no binding information on where it is based or where it stores data; according to public information, it is based in Sri Lanka. Data protection there is not equivalent to Swiss law, and FormSubmit offers no contractual guarantees. We therefore only transfer your details with your express consent (Art. 17 para. 1 let. a FADP), which you give by ticking the box in the form.

On our side, sign-ups are kept in the email inbox info@cascarup.ch on Microsoft 365 (Microsoft Corporation). Data may also be processed in the USA; Microsoft is certified under the Swiss-U.S. Data Privacy Framework. We delete your details after the notification, and at the latest when the student company closes at the end of the 2026/27 school year. To withdraw your consent, you can email info@cascarup.ch at any time.

Participation certificates

When you buy a participation certificate, we receive your first name and surname, your e-mail address, your phone number, your address, the number of certificates, your choice of whether you want your money back at the end, and your personal payment code. We need these details to match your payment and your certificates to you, to send you your certificate document, to reach you at the end of the business year and to pay your money back if you chose that. We don’t pass them on to anyone for their own purposes and we don’t sell them.

Your order goes through the FormSubmit service (formsubmit.co) by Devro LABS. FormSubmit receives your details and your IP address, forwards them by e-mail to info@cascarup.ch and sends you a confirmation with the amount and the code. FormSubmit does not state its registered office or storage location in a binding way; according to public information it is based in Sri Lanka. Data protection there is not equivalent to Swiss law, and FormSubmit offers no contractual guarantees. We therefore only pass on your details with your express consent (Art. 17 para. 1 let. a FADP), which you give by ticking the box in the form.

Payment is by TWINT (TWINT AG, Zurich). In our TWINT app we see your name, the amount and your message with the code. The payment itself is governed by the privacy terms of TWINT and your bank.

On our side, orders are kept in the email inbox info@cascarup.ch at Microsoft 365 (Microsoft Corporation). Data may also be processed in the USA; Microsoft is certified under the Swiss-U.S. Data Privacy Framework. We delete your details once the business year is closed and, if you chose that, your money has been paid back; we keep records for as long as the law requires. You can withdraw your consent at any time by e-mail to info@cascarup.ch ; what we need to match your certificates and pay you back, we keep until then.

Fonts

The fonts “Newsreader”, “Jost” and “DynaPuff” are hosted on this website itself. Displaying them sends no data to third parties.

Maps

The maps for our stalls are images hosted on this website itself; viewing them sends nothing to a map service. Only a click on “Directions” or on a map opens Google Maps, where Google’s privacy policy applies.

Social media

We link to our profiles on Instagram and TikTok. These are simple links: as long as you don’t click on one, nothing is sent to these services. On the platforms themselves, their own privacy policies apply.

Cookies and analytics

We do not use cookies, analytics or tracking tools, or social media plugins. Your browser remembers your basket in local storage, just for you. On Stripe’s payment page, Stripe sets its own cookies, which are needed for secure payment.

Your rights

You can ask at any time which data we process about you, and have it corrected or deleted. To do so, write to us at info@cascarup.ch. If you feel that we are not processing your data properly, you can contact the Federal Data Protection and Information Commissioner (FDPIC): www.edoeb.admin.ch.

Changes

If anything about this website changes, we will update this policy. The version published here applies.

Last updated: October 2026. This page is available in German, French and English; the German version is authoritative.