Privacy Policy
Controller and contact
Buri Sport Grindelwald AG
Dorfstrasse 160, 3818 Grindelwald, Switzerland
shop@burisport.ch · +41 33 853 33 55
Why we use your data
We process data to answer enquiries, manage rental bookings and lesson requests, prepare equipment, handle payments and keep accounts. We also use necessary data to operate our website securely and resolve claims.
Rentals and lesson requests
For rentals, we collect contact details, products, rental dates, collection point, rental protection selection and, where requested, a billing address. Depending on the equipment, we need the renter’s first name, age, gender, shoe size, height and weight. These details are stored with each rental item in our Shopware order system so authorised staff can prepare the equipment.
For lesson requests, we process contact details, lesson type, level, language, dates, participant details and, where relevant, ages, equipment needs and your message. Please provide only information needed for your request. If you book for others, inform them about this policy. Information about children should be provided by a parent, guardian or authorised person.
Hosting and technical data
Our website and Shopware are hosted by Infomaniak in Switzerland. Accessing the website generates technical data such as your IP address, access time, requested pages and browser information. We use this to deliver the website, troubleshoot problems and prevent misuse. Infomaniak processes hosting data on our behalf.
Cookies and browser storage
Cookies and local browser storage support the cart, your session and remembering the cookie notice. The notice acknowledgement cookie expires after 180 days; the corresponding local storage entry remains until deleted. Unfinished lesson requests, including entered contact and participant details, may be saved on your device.
You can delete or restrict this storage in your browser. This may limit website functionality. The cookie notice does not offer individual controls for external services.
Online payments with Stripe
We use Stripe for online payments. Stripe and the payment providers involved process transaction, contact, device and payment data needed to handle payments and prevent fraud. Depending on your choice, your bank, TWINT, Apple Pay or Google Pay providers may also be involved. We do not store full card numbers or security codes in our website order system. We receive payment references and payment status in particular. See Stripe’s privacy policy.
Email delivery with Brevo
We use Brevo to send emails such as order confirmations and responses to enquiries. Recipient addresses, message content, any attachments and technical delivery data are processed for this purpose. Brevo describes database storage within the EU, particularly France and Germany. See Brevo’s privacy policy.
Maps and external links
Our interactive maps use Mapbox. Loading a map transmits your IP address and technical usage information, among other data, to Mapbox. See Mapbox’s privacy policy.
Links to Google Maps or social media lead to external websites. Their providers’ privacy policies apply when you visit them.
Planned visitor statistics
We plan to run Plausible on our own server at Infomaniak in Switzerland. This analytics service has not yet been integrated. Before enabling it, we will update this policy to describe the configuration actually used.
Recipients and international processing
Authorised staff and service providers receive access where needed for the purposes described above, including hosting, technical support, email delivery and payments. Disclosures required by law remain possible.
Swiss hosting does not mean all processing takes place in Switzerland: Brevo processes data in the EU; Stripe and Mapbox may also process data in the United States, and Stripe in Ireland. Their policies describe further international processing. Transfers to countries without recognised adequate protection require appropriate safeguards, particularly recognised standard contractual clauses, or a statutory exception.
Retention and legal basis
Retention depends on the purpose, necessary records, statutory obligations and the resolution of claims. Accounting records have different requirements from completed enquiries, equipment measurements or technical logs. Indefinite retention is not intended.
Swiss data protection law applies. Where the EU GDPR also applies, processing is based on steps prior to a contract and contract performance, legal obligations, legitimate interests in secure operation and responding to enquiries, or consent where required.
Your rights
Within the scope of applicable law, you may request access, correction, erasure or restriction of processing and, where applicable, object or request data portability. You may withdraw consent for the future. Legal obligations may prevent erasure.
Contact shop@burisport.ch. We may request proportionate proof of identity to handle your request. You may also contact the Swiss FDPIC or another competent supervisory authority.
Changes
We update this policy when our services or processing activities change. Last updated: 18 September 2026.