Privacy policy

PRIVACY POLICY
Last updated: November 2025

1. Introduction
Graphium GmbH (“we”, “us”, “our”) operates the online shop www.impatienttabletop.com through the Shopify platform. We are responsible for the collection, processing, and use of your personal data in accordance with the Swiss Federal Act on Data Protection (nFADP) and, where applicable, the EU General Data Protection Regulation (GDPR).
We take the protection of your personal data seriously. This Privacy Policy explains what data we collect, how we use it, the legal bases for processing, and your rights under applicable data protection law.

2. Controller
Graphium GmbH
c/o TRM Consulting AG
Chamerstrasse 176, 6300 Zug, Switzerland
Representative: Thomas List-Battaglia
UID: CHE-166.506.006 (HR/MWST)
Handelsregister: CH-170.4.023.210-6
Email: tom@impatienttabletop.com
Tel: +41 77 217 99 87

For EU residents: If required under Article 27 GDPR, we will appoint an EU representative whose details will be published in this Privacy Policy once available.

3. Personal Data We Collect
We collect personal data when you visit our website, place an order, or communicate with us. The types of data we collect include:

• Identification and contact details (name, postal address, email, phone number)
• Order, billing, and payment information
• Delivery and shipping details
• Account login details (if you create an account)
• Communication history and correspondence
• Technical information (IP address, browser type, device data, cookies, access logs)

4. Purposes and Legal Bases for Processing
We process your personal data for the following purposes and based on the legal bases set out below:

• Processing and fulfilling orders, delivery, and invoicing: Performance of a contract (Art. 6(1)(b) GDPR)
• Payment processing and fraud prevention: Performance of a contract / Legitimate interest (Art. 6(1)(b) & (f) GDPR)
• Customer service and communication: Performance of a contract (Art. 6(1)(b) GDPR)
• Marketing and newsletters: Consent (Art. 6(1)(a) GDPR)
• Website operation, security, and analytics: Legitimate interest (Art. 6(1)(f) GDPR)
• Compliance with legal obligations (e.g. accounting): Legal obligation (Art. 6(1)(c) GDPR)

5. Sharing of Data
We share your data only as necessary to fulfill contractual or legal obligations. Recipients may include:

• Shopify, our e-commerce platform provider (hosted in the EU)
• Payment processors, such as Google Pay, Apple Pay, Shop or credit card acquirers
• Shipping providers, such as Swiss Post, DHL, or UPS
• IT service providers, including email, analytics, and hosting services

Some of these recipients may be located outside Switzerland or the EU/EEA. In such cases, we ensure an adequate level of data protection through:

• Adequacy decisions by the European Commission (e.g. Switzerland, UK, Canada)
• EU Standard Contractual Clauses (SCCs)
• Other appropriate safeguards permitted by law

6. Cookies and Tracking Technologies
Our website uses cookies and similar technologies for essential site functionality, analytics, and marketing.

• Essential cookies are necessary for the operation of the online shop and cannot be disabled.
• Analytics and marketing cookies (e.g. Google Analytics, Meta Pixel) are used only with your consent via the cookie banner.

You can withdraw your consent at any time through your browser settings or the cookie banner on our site.

7. Data Retention
We retain your personal data only for as long as necessary for the purposes for which it was collected or as required by law:

• Order and accounting data: up to 10 years (in line with Swiss commercial and tax law)
• Customer account data: until you delete your account
• Marketing data: until you withdraw your consent

8. Your Rights
Under applicable data protection law, you have the following rights:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (“right to be forgotten”) (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)
• Right to withdraw consent at any time (Art. 7(3) GDPR)

To exercise your rights, contact us at tom@impatienttabletop.com.
You also have the right to lodge a complaint with the competent supervisory authority:

• In Switzerland: Federal Data Protection and Information Commissioner (FDPIC)
• In the EU: your local data protection authority

9. Data Security
We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, misuse, or alteration. These include encryption, access controls, and secure data transmission protocols.

10. Shopify and Third-Party Services
Our online shop is hosted on Shopify Inc., which provides the e-commerce platform that enables us to sell products and services. Shopify stores your data on secure servers and processes it in accordance with its own Privacy Policy.
Payment transactions are handled exclusively through trusted third-party payment providers. We do not store full payment information such as credit card numbers.

11. Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our data processing practices or legal requirements. The most recent version is always available on our website.

12. Contact
For questions about this Privacy Policy or our data protection practices, please contact us at tom@impatienttabletop.com Tel: +41 77 217 99 87