PRIVACY POLICY
Version: [November 2026]
This privacy policy explains which personal data we process when you visit theyellinglight.ch, contact us or buy something in our shop. It is based on the Swiss Federal Act on Data Protection (FADP) and, where it applies, on the EU General Data Protection Regulation (GDPR).
1. Who is responsible
The Yelling Light
[Street and number]
[Postcode] [City]
Switzerland
Email: note@theyellinglight.ch
If you have questions about data protection or want to exercise your rights, please write to this address.
2. Hosting and server logs
Our website is hosted by METANET AG in Switzerland. When you open a page, the server automatically records technical data such as your IP address, the date and time, the page requested, the referring website and your browser. We need this data to deliver the website and to keep it secure. The log files are deleted after a short period.
3. Our own visitor statistics
We run our own visitor statistics to learn which pages and songs are of interest and where our listeners come from. For each page view we record a shortened version of your IP address (the last part is removed), the approximate location derived from it (country, region, city and coordinates), the page visited, the time spent on it, the referring website and the type of browser, device and operating system. To count visitors, we store a pseudonymous ID that can not be traced back to your IP address. When you use the music player, we also record which songs you play, for how long, at which volume, and your screen size.
To determine the location, the shortened IP address is sent to the service ip-api.com. Apart from that, the data stays on our server and is not passed on. We do not use cookies or tracking tools of other companies for these statistics. The data is deleted automatically after 14 months.
The fonts on our website are stored on our own server, so no data is sent to font providers.
4. Spam protection by Google reCAPTCHA
To protect the contact and pickup forms from spam, we use Google reCAPTCHA. It is only loaded when you start filling in one of these forms. Your browser then connects to servers of Google (Google Ireland Limited, Dublin, Ireland, and Google LLC, USA) and transmits your IP address and technical information about your browser. reCAPTCHA also evaluates how you interact with the form and can set cookies. Google may process this data in the USA. More information: https://policies.google.com/privacy
5. Data stored in your browser
Your shopping cart is saved in your browser (local storage), so it is still there when you come back. It stays on your device until you complete your order or clear it. If you sign in to a customer account, we set a cookie that keeps you signed in for up to 60 days (see section 8). Apart from this and the reCAPTCHA cookies mentioned above, we do not set cookies for visitors.
6. Contact and pickup requests
If you send us a message or a pickup request through the form or by email, we use your name, your email address and your message to answer you.
7. Orders
When you order, we process your name, email address, phone number (optional), delivery address, the products ordered, the prices and the payment and delivery status. We need this data to process and deliver your order, to answer your questions and to meet our accounting obligations. It is stored in our order database on our server in Switzerland.
Payment: Payments are processed by Stripe (Stripe Payments Europe, Limited, Dublin, Ireland). You enter your payment details directly on Stripe's payment page; we never receive your full card details. Stripe also uses your data to check payments for fraud and may process it in the USA. More information: https://stripe.com/privacy
Shipping: We pass your name and delivery address to Swiss Post, and where needed your email address or phone number for delivery notifications. For shipments outside Switzerland, the customs declaration with your address and the contents and value of the parcel is transmitted to the customs authorities and the postal service of the destination country.
Emails: We send order confirmations and shipping notifications by email through our email provider [name of the provider, country].
Downloads: To apply the download limit, we record when each file of your order is downloaded. Because the VAT on downloads depends on where you live, we keep the country you chose at checkout and the country of your billing address from Stripe as evidence for the tax authorities.
To protect the shop from abuse, we store your IP address in pseudonymised (hashed) form for up to 24 hours when you place an order, send a request or ask for a new download link.
We keep order and accounting data for 10 years, as Swiss law requires.
8. Customer account
You can use our shop without an account. If you sign in, we send a one-time sign-in link to your email address; an account is created the first time you use it. We store your email address, the name, phone number and delivery address you save, the time of your last sign-in and, if you turn it on, the key for two-factor authentication. Orders placed with your email address are shown in your account.
To keep you signed in, we set a cookie with a random value (valid for up to 60 days or until you sign out). You can delete your account at any time on your account page. Your orders remain stored for accounting purposes, but are then no longer linked to an account.
9. Legal basis
We process your data to perform a contract with you (orders, requests and your customer account), to comply with legal obligations (accounting and tax law) and on the basis of our legitimate interest in a secure, working website and in understanding how it is used (server logs, visitor statistics, spam protection). Where the GDPR applies, the legal bases are Art. 6(1)(b), (c) and (f) GDPR.
10. Transfer abroad
Some of the service providers named above may process data outside Switzerland and the EU, in particular in the USA. In these cases we rely on the Swiss–U.S. and EU–U.S. Data Privacy Framework or on standard contractual clauses. For international shipments, your data is transmitted to the destination country, as this is necessary to deliver your order.
11. Your rights
You have the right to know which personal data we hold about you, to have it corrected or deleted, to restrict or object to its processing and to receive it in a common format. Legal retention obligations may prevent us from deleting some data straight away. To exercise your rights, write to note@theyellinglight.ch.
You can also lodge a complaint with a data protection authority: in Switzerland with the Federal Data Protection and Information Commissioner (FDPIC, https://www.edoeb.admin.ch), in the EU or EEA with the authority in your country of residence.
12. Changes
We may update this privacy policy when our website or our services change. The version published on this page applies.