← Back

Privacy notice

Waiting list · Version 1.0 · 10.09.2026

You gave us an email address so we could tell you when ral&pal launches, and keep you posted after that. This page explains exactly what we hold, why we are allowed to hold it, and how to make us delete it.

Who is responsible for your data

The data controller is:

We have not appointed a Data Protection Officer. Our processing does not meet the criteria in Article 37 GDPR, nor the conditions in Article 10 FADP, that would require one.

Which law applies

Two regimes apply to us at the same time, and we hold ourselves to both.

Where the two differ, we follow whichever gives you more protection.

What we collect

DataWhy we have it
Your email address So we can send you the launch announcement, and later news about new drops and offers. You typed it into the form yourself.
The wording you agreed to, plus the date and time Article 7(1) GDPR requires us to be able to prove you consented. This is that proof.
Technical data from the signup — IP address, browser Recorded by our email provider to evidence consent and to block automated signups.

We do not collect your name, your address, your payment details or your location. We do not buy email addresses, and we do not add anyone to this list who did not ask to be on it.

Our legal basis

Your consent — Article 6(1)(a) GDPR, together with Article 3(1)(o) of the Swiss Unfair Competition Act (UWG), which requires your prior consent, correct identification of the sender, and a free and easy way to refuse further email.

Consent means you ticked an unticked box of your own accord. It was not bundled with anything else, and refusing it costs you nothing. You can withdraw it at any time, and withdrawing is as easy as giving it: one click on the unsubscribe link in any email we send you. Withdrawal does not affect anything we lawfully did before you withdrew.

Confirming your address

After you sign up we send one email asking you to confirm. If you do not click it, you stay unconfirmed and we send you nothing further. This is double opt-in, and it protects you from being signed up by someone else.

Who else sees it

We use one email service provider to hold the list and send the emails. They act as our processor under a data processing agreement, they process only on our instructions, and they may not use your address for their own purposes.

We do not sell your data, and we do not share it for anyone else's marketing.

Our website is hosted in Germany. Switzerland and the EU recognise each other as providing adequate protection, so hosting there raises no transfer issue in either direction.

Klaviyo stores data in the United States. Klaviyo participates in the EU–U.S. Data Privacy Framework and its Swiss extension, which the Swiss Federal Council recognised on 15 September 2024. That covers the transfer under both regimes. Klaviyo's data processing agreement additionally incorporates the European Commission's Standard Contractual Clauses as a fallback. You can ask us for a copy of the safeguards in place.

How long we keep it

Your rights

Under the GDPR, and under the FADP where it gives the equivalent right, you can ask us to:

Email contact@ralandpal.com and we will respond within one month. There is no charge. We may ask you to confirm it is really you before we act.

If you think we have handled your data badly, you can complain to either:

You can also take the matter to a court.

Cookies and tracking

This site sets no cookies and runs no analytics or advertising trackers. Our fonts are served from our own server, so loading a page does not contact Google, a font service, or any other third party. Nothing leaves your browser until you submit the form yourself.

If you add a Meta Pixel, Google Analytics or any advertising tag, this section stops being true. You would then need a consent banner that blocks those scripts until the visitor agrees, and a separate cookie policy.

Our representative in the EU

We have no establishment in the European Union. Article 27 GDPR requires companies in our position to designate a representative in the EU, unless the processing is occasional, involves no sensitive data, and is unlikely to put anyone at risk.

We have not appointed one. At this stage we hold nothing but an email address given voluntarily to a pre-launch list — no profiling, no sensitive categories, no orders. We consider that to fall within the exemption. When we begin taking orders from customers in the EU, we will appoint a representative and name them here.

Changes

If we change how we use your address, we will update this page and, where the change is significant, email you before it takes effect. The version number and date at the top always tell you which version you are reading.