top of page
WEB_DISPLAY_PAGE_3POINTS_02_picto_MadamePepita.png

PRIVACY POLICY

Last updated: January 2026

1. Introduction and commitment

Pepita Watch is committed to protecting the privacy and personal data of its customers and website visitors.

This Privacy Policy explains how we collect, use, retain and protect your personal data, in accordance with:

  • The Swiss Federal Act on Data Protection (FADP)

  • The European General Data Protection Regulation (GDPR), applicable to our customers residing in the European Union

  • The Swiss Federal Act on Combating Money Laundering (AMLA)

We are committed to:

  • Collecting only the data necessary for our activities

  • Using your data in a transparent and secure manner

  • Never selling your data to third parties

  • Respecting your rights regarding data protection

​

2. Data controller

Identity of the controller:

Pepita Watch

[Legal form]

P.O. Box

1004 Lausanne

Switzerland

Contact:

Email: hello@pepitawatch.ch

Phone: 078/607.30.36

​

3. Personal data collected

3.1 Data collected via the appointment request form

When you request an appointment through our website, we collect:

  • Identification data: Last name, first name

  • Contact data: Email address, phone number

  • Data relating to your request: Watch(es) you are interested in, free-form message

  • ID document

Legal basis: Pre-contractual measures (booking an appointment) and consent.

3.2 Data collected during in-person appointments

For security reasons and to comply with the AMLA (anti-money-laundering rules), we may collect:

  • ID document: Copy of your ID card or passport (for significant transactions)

  • Proof of address: If required for AMLA compliance

  • Financial information: Bank details (for transfers), transaction amount

Legal basis: Legal obligation (AMLA compliance for transactions ≥ CHF 15,000) and performance of the sales contract.

3.3 Browsing data on the website

When you visit our site, we automatically collect:

  • Technical data: IP address, browser type, operating system, pages visited

  • Cookies: For the proper functioning of the site and audience analytics (see our Cookie Policy)

Legal basis: Legitimate interest (security, improvement of the site) and consent for non-essential cookies.

3.4 Data collected via correspondence

If you contact us by email or phone:

  • Content of your message or the call

  • History of exchanges

Legal basis: Performance of the contract or pre-contractual measures, and legitimate interest (management of the customer relationship).

​

4. Purposes of data processing

We use your personal data for the following purposes:

4.1 Appointment management

  • Process your appointment request

  • Organise video and in-person appointments

  • Communicate with you regarding appointments

4.2 Management of the commercial relationship

  • Present our watches and services

  • Answer your questions

  • Establish and manage sales contracts

  • Handle payments, invoices and any refunds

  • Provide after-sales service and warranties

4.3 Legal compliance and security

  • Comply with our legal obligations, in particular the AMLA (anti-money-laundering)

  • Identify our customers for significant transactions (≥ CHF 15,000)

  • Prevent fraud and illegal activities

  • Retain accounting and tax records

4.4 Improvement of our services

  • Analyse the use of the site (anonymised statistics)

  • Improve the user experience

  • Personalise our communications (with your consent)

4.5 Marketing (with consent)

  • Send you our newsletter (if you have consented)

  • Inform you of newly available watches

  • Offer you personalised deals

Important: You may withdraw your consent at any time by contacting us or by clicking the unsubscribe link in our emails.

​

5. Legal basis for processing

We process your personal data on the following legal bases:

Type of data

Legal basis

Appointment request

Pre-contractual measures

Sales contract

Performance of the contract

ID document (AMLA)

Legal obligation

Retention of accounting documents

Legal obligation

Website analytics

Legitimate interest

Newsletter

Consent

Non-essential cookies

Consent

 

6. Recipients of your data

6.1 Internal access

Your data is accessible only by:

  • The owner/manager of the company

  • Authorised staff (where applicable)

6.2 Sharing with third parties

We never sell, rent or share your personal data for commercial purposes.

Your data may be passed on only to the following third parties, strictly within the scope of our obligations:

Essential service providers:

  • Website host: WIX (storage of browsing data)

  • Email service: Infomaniak

  • Web analytics tools: [Google Analytics, other if applicable] (anonymised statistics)

Professional experts and partners:

  • Independent watch experts (for authentication, where necessary)

  • Insurance company (for covering the watches)

  • Accountant / fiduciary (for tax obligations)

Competent authorities (in the event of a legal obligation):

  • Swiss tax authorities

  • MROS (Money Laundering Reporting Office Switzerland) in the event of a suspicious transaction

  • Judicial authorities pursuant to a legal order

6.3 Contractual safeguards

All third-party service providers are bound by strict confidentiality obligations and may use your data only within the scope of the services provided.

​

7. Data transfers outside Switzerland

7.1 Principle of localisation

Your data is mainly stored in Switzerland or within the European Union.

7.2 Possible transfers

Some providers (e.g. Google Analytics, cloud services) may store data outside Switzerland/the EU, in particular in the United States.

Safeguards applied:

  • Standard Contractual Clauses (SCC) approved by the European Commission

  • Enhanced security measures

  • Limitation to strictly necessary data

7.3 Your rights

You can object at any time to the transfer of your data outside Switzerland by contacting us.

​

8. Data retention periods

We retain your personal data only for as long as is necessary for the purposes for which it was collected:

Type of data

Retention period

Appointment request not followed by a purchase

2 years after the last contact

Sales contract and invoices

10 years (legal accounting and tax obligation)

ID document (AMLA)

10 years after the end of the business relationship

Banking data

Deleted after payment is confirmed (except where legally required)

Email correspondence

5 years after the last contact

Browsing data (cookies)

13 months maximum

Newsletter

Until unsubscription + 3 years (proof of consent)

At the end of these periods, your data is securely deleted or anonymised.

​

9. Security of your data

We implement appropriate technical and organisational measures to protect your data against:

  • Unauthorised access

  • Accidental or unlawful disclosure, alteration or destruction

9.1 Technical security measures

  • HTTPS (SSL/TLS) connection for the website

  • Secure hosting with [reputable host]

  • Regular encrypted backups

  • Access protected by strong passwords and authentication

  • Up-to-date antivirus and firewall

9.2 Organisational measures

  • Limited access to data (principle of least privilege)

  • Staff awareness of data protection

  • Procedures for handling security incidents

  • Secure storage of paper documents (safe, locked cabinet)

​

10. Your rights

In accordance with the FADP and the GDPR, you have the following rights regarding your personal data:

10.1 Right of access

You have the right to know what data we hold about you and to obtain a copy of it.

10.2 Right of rectification

You may request the correction of inaccurate or incomplete data.

10.3 Right to erasure ("right to be forgotten")

You may request the deletion of your data, unless we have a legal obligation to retain it (e.g. accounting documents for 10 years).

10.4 Right to restriction of processing

You may request the restriction of the use of your data in certain circumstances.

10.5 Right to object

You may object to the processing of your data for direct marketing purposes or based on our legitimate interest.

10.6 Right to data portability

You may receive your data in a structured, readable format and transmit it to another controller.

10.7 Right to withdraw consent

Where processing is based on your consent (newsletter, non-essential cookies), you may withdraw it at any time.

10.8 Right to lodge a complaint

You have the right to lodge a complaint with the competent data protection authority:

In Switzerland:

Federal Data Protection and Information Commissioner (FDPIC)

Feldeggweg 1

3003 Bern

Switzerland

Tel.: +41 58 462 43 95

Email: info@edoeb.admin.ch

Website: www.edoeb.admin.ch

For EU residents: The data protection authority of your country of residence.

10.9 How to exercise your rights

To exercise any of these rights, contact us:

  • By email: hello@pepita.ch

  • By post: Pepita Watch, [Full address], Switzerland

Response time: We undertake to respond to your request within 30 days.

Proof of identity: For security reasons, we may ask you to prove your identity.

​

11. Cookies and similar technologies

This site uses cookies. For more detailed information, please refer to our Cookie Policy.

11.1 Types of cookies used

  • Essential cookies: Necessary for the operation of the site (no consent required)

  • Analytical cookies: Google Analytics for visitor statistics (consent required)

  • Marketing cookies: [If applicable] (consent required)

11.2 Cookie management

You can accept or refuse non-essential cookies via the banner displayed on your first visit.

You can also manage your preferences at any time in your browser settings.

​

12. Changes to the privacy policy

We reserve the right to modify this Privacy Policy at any time to reflect:

  • Changes in our practices

  • Legal or regulatory developments

  • Improvements to our services

In the event of a substantial change:

  • The "Last updated" date will be updated at the top of this document

  • We will inform you by email if you are an active customer

  • Continued use of the site constitutes acceptance of the new policy

We encourage you to review this page regularly.

​

13. Minors

Our services are intended for adults (18 years and older in Switzerland). We do not knowingly collect personal data from minors.

If you are a parent or legal guardian and you believe that your child has provided us with personal data, please contact us immediately so that we can delete it.

​

14. Links to third-party sites

Our site may contain links to third-party websites (social networks, partners). We are not responsible for their privacy practices.

We encourage you to read their privacy policies before providing them with your data.

​

15. Public data and social networks

If you interact with us via social networks (comments, messages), please note that these interactions may be public depending on your privacy settings.

We are not responsible for the processing of your data by social network platforms.

​

16. Contact and questions

For any questions relating to this Privacy Policy or the processing of your personal data:

Email: hello@pepitawatch.ch

Phone: 078/607.30.36

Post: PEPITAWATCH

[Full address]

1004 Lausanne

Switzerland

bottom of page