Data privacy

1) Introduction and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below we inform you about the handling of your personal data when using our website. Personal data includes all data by which you can be personally identified.

1.2 The controller for data processing on this website within the meaning of the Swiss Federal Act on Data Protection (FADP) is mofakult AG, Im Buchfeld 20, 8500 Frauenfeld, Switzerland, Tel.: 0041 52 730 05 30, Email: info@mofakult.ch.

The controller is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.

2) Data Collection When Visiting Our Website

2.1 When you visit our website for purely informational purposes — i.e. if you do not register or otherwise submit information to us — we only collect data that your browser transmits to the page server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary to display the website to you:

• Our visited website
• Date and time of access
• Amount of data sent in bytes
• Source/referrer from which you accessed the page
• Browser used
• Operating system used
• IP address used (if applicable: in anonymized form)

Processing is carried out on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used in any other way. We do, however, reserve the right to review server log files retrospectively if there are concrete indications of unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content, this website uses SSL/TLS encryption. You can recognize an encrypted connection by the string "https://" and the padlock symbol in your browser bar.

3) Hosting & Content Delivery Network

3.1 Amazon Web Services

For hosting our website and displaying page content, we use the system of the following provider: Amazon Web Services, Inc., 410 Terry Avenue North, Seattle, WA 98109, USA.

All data collected on our website is processed on the provider's servers. We have concluded a data processing agreement with the provider that ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

3.2 AWS CloudFront

We use a content delivery network of the following provider: Amazon Web Services, Inc., 410 Terry Avenue North, Seattle, WA 98109, USA.

This service allows us to deliver large media files such as graphics, page content or scripts more quickly via a network of regionally distributed servers. Processing is carried out in our legitimate interest in improving the stability and functionality of our website. We have concluded a data processing agreement with the provider.

For data transfers to the USA, the provider relies on standard contractual clauses of the Swiss Federal Data Protection and Information Commissioner (FDPIC).

4) Cookies

To make visiting our website attractive and to enable the use of certain functions, we use cookies — small text files stored on your device. Some are deleted automatically when you close your browser ("session cookies"); others remain on your device longer and allow page settings to be saved ("persistent cookies").

Where cookies also process personal data, this is done either for the performance of a contract, on the basis of consent given, or in our legitimate interest in the best possible functionality of the website.

You can set your browser to inform you about the placement of cookies and to decide individually on their acceptance, or to exclude cookies in certain cases or in general.

Please note that refusing cookies may restrict the functionality of our website.

Cookies we use:

Functional, necessary cookies

• BEARER, c-expiry (mofakult shop): store an authentication token (bearer token) used to identify the logged-in user and maintain their session.
• thx_guid, tmx_guid (CembraPay): unique identifiers used by CembraPay's Threatmetrix service during checkout to detect and prevent potentially fraudulent activity.
• _GRECAPTCHA, NID (Google): used by reCAPTCHA to keep spam and malicious bots from interacting with the website.
• ts, X-pp-s, x-csrf-jwt, fn_dt, ddi, enforce_policy, LANG, cookie_prefs, tsrce, nsid, d_id, ts_c, 17_az, TLTSID, cookie_check (PayPal): various cookies used during the PayPal payment process for security, identity verification, language settings, and data synchronization.
• _GRECAPTCHA, cookie_checksum, kdid (Klarna): cookies ensuring a smooth and secure Klarna payment process.
• _fw_crm_v, _x_w, _x_m, _helpkit_session, helpdesk_node_session, user_credentials, wf_order, wf_order_type, wf_filter (Freshdesk): used for live support and FAQs.

Statistics and market analysis cookies

• _ga, _gid (Google): used by Google Analytics to obtain insights into website usage and generate reports on visitor activity.
• _uetsid, SRCHHPGUSR, _EDGE_S, SRCHD, SRCHUSR, SRCHUID, MUID (Bing): collect information about your interactions on Bing and its partner sites to personalize your search experience.
• _fbp, fr, tr (Facebook): used to personalize user experience, optimize ads, and measure the success of advertising campaigns.

5) Contact

5.1 Freshchat

This website uses a live chat system of the following provider: Freshworks, Inc., 2950 S. Delaware Street, Suite 201, San Mateo, California 94403, USA.

Processing of personal data transmitted via chat is carried out either because it is necessary for the initiation or performance of a contract, or on the basis of our legitimate interest in effectively supporting our site visitors. Your data is deleted once the matter has been conclusively resolved.

5.2 Trusted Shops

For review reminders, we use the services of: Trusted Shops AG, Subbelrather Str. 15c, 50823 Cologne, Germany.

Solely on the basis of your explicit consent, we transmit your email address to the provider so they can contact you with a review reminder by email. You can revoke your consent at any time.

5.3 Google Calendar

For providing an online appointment booking function, we use the services of: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. Data may also be transferred to Google LLC, USA.

For the purpose of scheduling appointments, your first and last name and email address (and phone number if a phone appointment is requested) are collected and transmitted to the provider. After the appointment has taken place, your data is deleted by the provider.

5.4 Freshdesk

For processing customer inquiries, we use the email ticketing system of: Freshworks, Inc., 2950 S. Delaware Street, Suite 201, San Mateo, California 94403, USA.

Contact requests submitted via our website are stored and organized in the ticketing system. You can always check the current processing status of your request via your individually assigned ticket number.

5.5 WhatsApp Business

We offer you the option to contact us via the WhatsApp messaging service of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. We use the "Business" version of WhatsApp.

If you contact us via WhatsApp in connection with a specific transaction, we store and use your mobile number and — if provided — your name to process and respond to your inquiry. Your data is used solely to respond to your inquiry and is not passed on to third parties.

Please note that WhatsApp Business accesses the address book of the mobile device we use for this purpose and automatically transmits stored phone numbers to a server of the parent company Meta Platforms Inc. in the USA.

5.6 When you contact us (e.g. via contact form or email), personal data is processed solely for the purpose of handling and responding to your inquiry and only to the extent necessary. Your data is deleted once the matter has been conclusively resolved.

5.7 Review Reminder by Trusted Shops

If you have given us your explicit consent during or after your order, we transmit your email address to Trusted Shops GmbH so they can send you a review reminder by email. You can revoke your consent at any time.

6) Comment Function

In the context of the comment function on this website, in addition to your comment, the time of its creation and your chosen commenter name are stored and published. Your IP address is also logged for security reasons. Your email address is used to contact you if a third party contests your published content as unlawful.

7) Data Processing When Opening a Customer Account

Personal data is collected and processed to the extent necessary when you provide it to us upon opening a customer account. Deletion of your customer account is possible at any time. After deletion, your data is erased once all contracts concluded through it have been fully processed and no statutory retention obligations apply.

8) Use of Customer Data for Direct Marketing

8.1 Email Newsletter Registration

If you sign up for our email newsletter, we will regularly send you information about our offers. The only mandatory information is your email address. We use the double opt-in procedure. You can unsubscribe at any time via the link provided in the newsletter.

8.2 Sending the Email Newsletter to Existing Customers

If you provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers for similar products by email. No separate consent is required. You may object to this at any time.

8.3 Amazon SES

Our email newsletters are sent via: Amazon Web Services, Inc., 410 Terry Avenue North, Seattle WA 98109, USA. Subject to your explicit consent, the provider also carries out statistical performance analysis of newsletter campaigns using web beacons/tracking pixels.

8.4 MailChimp

Our email newsletters are also sent via: The Rocket Science Group, LLC d/b/a MailChimp, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA. Subject to your consent, the provider also carries out statistical campaign analysis.

8.5 WhatsApp Newsletter

If you subscribe to our WhatsApp newsletter, we will regularly send you information about our offers via WhatsApp. The only mandatory information is your mobile number. To subscribe, save our mobile number in your contacts and send us "Start" via WhatsApp. You can unsubscribe at any time by sending "Stop".

8.6 Product Availability Notification by Email

For temporarily unavailable items, you can register to receive an email notification when the item becomes available again. We use the double opt-in procedure. You can unsubscribe at any time.

9) Data Processing for Order Fulfillment

9.1 To the extent necessary for contract fulfillment for delivery and payment purposes, the personal data we collect is passed on to the commissioned transport company and the commissioned credit institution.

9.2 Transfer of Personal Data to Shipping Service Providers

• GLS: General Logistics Systems Germany GmbH & Co. OHG, GLS Germany-Straße 1–7, 36286 Neuenstein, Germany. Your email address and/or phone number are transmitted for delivery coordination only if you have given your explicit consent during the ordering process.
• Post CH: Schweizerische Post AG, Wankdorfallee 4, 3030 Berne. Same conditions as GLS.
• notime: notime AG, Pfingstweidstrasse 60b, 8005 Zurich. Same conditions as GLS.

9.3 Use of Payment Service Providers

• Klarna: Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden. For advance payment methods, your payment data is transmitted to Klarna. For invoice or installment purchases, a credit check is carried out.
• Mollie: Mollie B.V., Keizersgracht 313, 1016 EE Amsterdam, Netherlands. Your payment data is transmitted exclusively for payment processing purposes.
• PayPal: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. For certain payment methods, a credit check is carried out.
• TWINT: TWINT AG, Stauffacherstrasse 31, CH-8004 Zurich, Switzerland. Your payment data is transmitted exclusively for payment processing purposes.
• Cembra Pay: CembraPay AG, Bändliweg 20, 8048 Zurich, Switzerland. Same conditions as TWINT.
• PostFinance: PostFinance AG, Mingerstrasse 20, CH-3030 Berne, Switzerland. Same conditions as TWINT.

9.4 We reserve the right to transfer your data to the collection service provider Intrum AG, Eschenstrasse 12, 8603 Schwerzenbach, Switzerland, if a payment claim has not been settled despite a prior reminder.

9.5 Credit Checks

If we provide advance performance (e.g. delivery on account), we reserve the right to carry out a credit check. The necessary data (name, address, date of birth, contact details) is transmitted to Intrum AG. You may object to this processing at any time.

10) Online Marketing

Google AdSense

This website uses Google AdSense, a web advertising service of Google Ireland Limited. Google AdSense uses cookies and "web beacons" to analyze the use of the website. The information generated (including your IP address) is transmitted to Google servers. All processing is only carried out if you have given us your explicit consent. You can revoke your consent at any time via the cookie consent tool.

11) Web Analytics Services

11.1 Google Analytics 4

This website uses Google Analytics 4 from Google Ireland Limited. By default, Google Analytics 4 does not use cookies unless you explicitly consent. Information about your behavior is collected via "pings". Your IP address is truncated by Google to exclude direct identification. Data is stored for two months and then deleted. All processing is only carried out on the basis of your explicit consent.

Demographic features: Google Analytics 4 can create statistics on the age, gender and interests of site visitors based on advertising and third-party information. Data collected cannot be attributed to any specific individual.

Google Signals: Extension of Google Analytics 4 enabling cross-device reports. If you have enabled personalized ads and linked your devices to your Google account, Google may analyze your behavior across multiple devices.

User IDs: If you have consented to Google Analytics 4 and created an account on this website, your activities may be analyzed across multiple devices.

11.2 ABlyft

This website uses the web analytics service of Conversion Expert GmbH, Zeppelinring 52, 24146 Kiel. The service enables statistical evaluation of the use of new functions and content via test variants. It uses cookies. All processing is only carried out on the basis of your consent.

11.3 Google Tag Manager

This website uses Google Tag Manager from Google Ireland Limited. The Tag Manager itself does not store information on user devices or read it out, and does not carry out any independent data analyses. However, your IP address is transmitted to Google when the page loads. This processing is only carried out if you have given us your explicit consent.

11.4 Hotjar

This website uses the web analytics service of Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta. Using cookies and/or comparable technologies, the service collects pseudonymized visitor data for statistical analyses (including heatmaps). All processing is only carried out on the basis of your consent.

12) Retargeting/Remarketing and Conversion Tracking

12.1 Meta Pixel with Advanced Matching

Within our online offering, we use the "Meta Pixel" service of Meta Platforms Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland, in advanced matching mode. This service helps us to make our ads on Facebook and Instagram more effective and to ensure they correspond to your interests, and to create custom audiences. All processing is only carried out on the basis of your explicit consent.

12.2 Google Ads Remarketing

This website uses retargeting technology from Google Ireland Limited. Google places a cookie in your browser to enable interest-based advertising. All processing is only carried out on the basis of your consent.

12.3 Google Ads Conversion Tracking

This website uses conversion tracking from Google Ireland Limited as part of Google Ads. A conversion tracking cookie is set when you click on a Google ad. These cookies generally expire after 30 days and do not serve to personally identify users. All processing is only carried out on the basis of your consent.

12.4 Google Ads Conversion Tracking Without Cookies

This website uses Google Ads conversion tracking exclusively without cookies. Instead, your browser's local storage is used to store an individual ID assigned by Google. Processing is carried out in our legitimate interest in statistically evaluating the success of our advertising campaigns.

12.5 TikTok Pixel

This website uses the conversion tracking technology of TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland. If you arrived on our website from a TikTok ad, the success of the ad can be tracked via cookies and/or comparable technologies. All processing is only carried out on the basis of your consent.

13) Website Features

13.1 Facebook Plugins

Our website uses plugins from the social network of Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. These plugins are initially deactivated via a "2-click" or "Shariff" solution. A connection to the provider's servers is only established when you activate the plugins and thereby give your consent to data transmission. You can revoke your consent at any time by deactivating the plugin.

13.2 Instagram Plugins

Our website uses plugins from the social network of Meta Platforms Ireland Ltd. The same conditions apply as for Facebook plugins.

13.3 YouTube

This website uses plugins for displaying and playing videos from Google Ireland Limited. When a page containing such a plugin loads, your browser establishes a direct connection to the provider's servers, including the transmission of your IP address. All processing is only carried out on the basis of your consent.

13.4 Apple Single Sign-On

Our website offers a Single Sign-On function from Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland. If you have an Apple account, you can use it to create an account on our website. General and publicly accessible information from your Apple account is only transmitted to us on the basis of your explicit consent.

13.5 Google Sign-In

Our website offers a Single Sign-On function from Google Ireland Limited. The same conditions apply as for Apple Single Sign-On.

13.6 Google Reviews PRO

Graphic elements from MARKET PUSH APPS S.R.L., Str. Costesti Nr. 66 E, Costesti 337327, Romania are integrated on our website to display external customer reviews. When the page loads, your browser establishes a direct connection to the provider's servers.

13.7 Trusted Shops Trustbadge

Graphic elements from Trusted Shops AG, Subbelrather Str. 15C, 50823 Cologne, Germany are integrated to display external customer reviews and/or an externally awarded quality seal. When placing an online order, information about your order and your email address may be transmitted to the provider on the basis of your consent.

13.8 Google Maps

This website uses Google Maps (API) from Google Ireland Limited. When you access subpages containing the Google Maps map, information (including your IP address) is transmitted to Google servers. If you are logged into Google, your data is directly associated with your account. Where legally required, we have obtained your consent for this processing.

13.9 Google Maps API

To enable real-time validation of certain entries in the address form of our webshop order process, we use the services of Google Ireland Limited. The address data you enter is transmitted to the provider and deleted once its accuracy is confirmed, at the latest after 30 days.

13.10 Google Web Fonts

This site uses web fonts from Google Ireland Limited for consistent presentation of typefaces. When a page loads, your browser downloads the required web fonts and establishes a direct connection to the provider's servers, including the transmission of your IP address. This processing is only carried out on the basis of your consent.

13.11 Google reCAPTCHA

This website uses the CAPTCHA service of Google Ireland Limited. This service verifies whether input is being made by a natural person or by automated processing, and blocks spam, DDoS attacks and similar automated malicious access. Where the described processing is carried out without cookies, the legal basis is our legitimate interest in preventing abuse.

13.12 Google Customer Reviews (formerly Google Certified Shops)

We work with Google as part of the "Google Customer Reviews" program. After a purchase on our website, you are asked whether you would like to participate in an email survey by Google. If you give your consent, we transmit your email address to Google. You can revoke your consent at any time.

13.13 Google Forms

For conducting surveys or online forms, we use the services of Google Ireland Ltd. In addition to the personal data you enter in the forms, information about your operating system, browser, date and time of your visit, referrer URL and IP address are also collected.

13.14 Typeform

For conducting surveys or online forms, we use the services of TYPEFORM SL, Carrer de Can Rabia 3-5, 4th floor, 08017 Barcelona, Spain. The same types of data are collected as for Google Forms.

13.15 minubo

For internal visualization of business processes and customized analysis, we use the minubo service of minubo GmbH, Schwanenwik 24, 22087 Hamburg, Germany. Personal customer data may be subject to visualization and analysis operations. minubo processes data exclusively in data centers within the EU.

13.16 Job Applications by Email

On our website, we publish currently vacant positions in a separate section. Applicants must provide all personal data necessary for a thorough assessment. Data is stored and used exclusively for the purpose of processing the application. If an applicant is not selected or withdraws their application, the transmitted data is deleted at the latest after 6 months.

14) Tools and Miscellaneous

14.1 bexio

For bookkeeping purposes, we use the cloud-based accounting software service of bexio AG, Alte Jonastrasse 24, 8640 Rapperswil-Jona, Switzerland. The provider processes incoming and outgoing invoices as well as bank transactions to automatically record invoices and create financial accounting in a partially automated process.

14.2 Cookie Consent Tool

This website uses a "cookie consent tool" to obtain valid user consent for cookies requiring consent. The tool is displayed upon visiting the site as an interactive user interface. The tool sets technically necessary cookies to save your cookie preferences. Personal user data is generally not processed.

14.3 Elasticsearch

This website uses the search technology service of ELASTIC, 800 West El Camino Real, Suite 350, Mountain View, California 94040, USA. To provide the article search function, the provider collects and stores certain user information (such as user or session ID) in anonymized form.

14.4 Sentry

This website uses an automatic error report transmission service of Functional Software Inc., 45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA. In the event of technical complications, the service automatically sends error reports to the provider. These reports may in some cases contain personal customer data.

14.5 Channable

This website uses Channable, an online marketing tool of ProductImpulse BV, Kromme Nieuwegracht 66, 3512 HL Utrecht, Netherlands. Channable uses cookies to analyze website usage and evaluate the performance of connected online marketing channels. The IP address is stored temporarily (generally a maximum of 24 hours) solely for click fraud detection. You can opt out of data collection at: www.channelpilot.de/optout.

15) Rights of the Data Subject

15.1 The applicable data protection law grants you the following rights as a data subject:

• Right of access pursuant to Art. 25 FADP
• Right to rectification pursuant to Art. 32 para. 1 FADP
• Right to data portability pursuant to Art. 28 FADP

15.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF A BALANCING OF INTERESTS IN PURSUIT OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME WITH EFFECT FOR THE FUTURE, FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED. FURTHER PROCESSING REMAINS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENSE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

16) Duration of Storage of Personal Data

The duration of storage of personal data is determined by the respective legal basis, the processing purpose and — where applicable — the relevant statutory retention periods (e.g. commercial and tax retention obligations).

Where personal data is processed on the basis of explicit consent, the data concerned is stored until you revoke your consent.

Where statutory retention periods exist for data processed in the context of contractual or quasi-contractual obligations, this data is routinely deleted after the retention periods expire, provided it is no longer required for contract performance or initiation and no legitimate interest in further storage persists on our part.

Where personal data is otherwise processed, it is stored until you exercise your right to object, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms.

Personal data processed for direct marketing purposes is stored until you exercise your right to object.

Otherwise, personal data is processed for as long as you do not expressly prohibit such processing, unless we can demonstrate an overriding interest for continued processing within the meaning of Art. 31 para. 2 FADP or a legal justification.

Unless otherwise stated in the other information in this declaration regarding specific processing situations, stored personal data is deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

Status: 23.02.2026, 08:50:05