Privacy policy

Which data we process and why

• Visiting the website. To deliver the pages and protect the site from abuse, Cloudflare and our server receive the IP address, the page requested, date and time and the browser type. The shop server does not store visitors’ IP addresses in its logs; to limit repeated form submissions it uses them for a few minutes only.
• Cart. The items you put in the cart stay only in your browser until you send the order (see “Cookies and browser storage”).
• Order. Name, email, phone, delivery address, canton, notes, items and amounts: we need them to check the order, send you the order confirmation and pro-forma invoice, receive payment, deliver, handle warranty claims and meet our accounting obligations.
• Contact form and email. Name, email, phone if you give it, message and any product: we need them to answer you. The form is protected by Google reCAPTCHA, which checks that a person is sending it; messages recognised as spam go to a separate folder.
• WhatsApp. Phone number, profile name, messages, images, documents and voice messages: we need them to answer your questions and handle requests and orders (details below).
• Warranty and service. Order data, serial numbers, installation report and, if available, monitoring data: we share them with the manufacturer Heiwit to handle the claim.

We process this data to conclude and perform the contract, to meet legal obligations and to run the shop securely. We do not sell data, do not build profiles and do not send advertising to anyone who has not asked for it.

Assistant on WhatsApp

Anyone who writes to the shop’s WhatsApp number gets the first answers from an assistant based on artificial intelligence. The assistant can make mistakes: the prices, availability and terms that count are those in the order confirmation and the pro-forma invoice. It does not decide on its own whether to accept an order or a warranty claim: our team does, and the assistant passes requests on to it when needed.

Messages go through Meta’s WhatsApp Business platform. The assistant’s platform is run on our behalf by Heiwit S.p.A. on servers of Aruba S.p.A. in Italy. Text, images and documents are processed by the Claude models of Anthropic, PBC in the United States; voice messages are transcribed by Google Cloud Speech-to-Text. We receive a copy of the conversation (message text and voice-message transcripts) with the details you give in the chat, to answer you and handle requests and orders.

Cookies and browser storage

The website stores on your device only what it needs to work. We use no analytics or advertising cookies.

You can block or delete cookies and site data in your browser settings. Without cookies, however, orders and messages cannot be sent, because the forms are protected, and without local storage the cart does not remember items. Staff who log in to the restricted area also use a login cookie, valid for up to 90 days if they choose “Remember me”.

Who we share data with

To run the shop we use the providers below. When data goes to a country whose protection Switzerland does not recognise as adequate, the transfer relies on the safeguards shown.

Aruba, Cloudflare, Resend, Heiwit and Anthropic process the data on our behalf. Google for reCAPTCHA and Meta for WhatsApp also process it under their own privacy policies. We share data with authorities only where the law requires it.

How long we keep data

• Orders, pro-forma invoices, invoices and business correspondence: 10 years, as required by the Swiss Code of Obligations (Art. 958f CO).
• Messages, requests and chats: as long as we need them to answer you and manage our relationship with you; after a purchase, until the end of the product warranty. You can ask us to delete them earlier, except for data we must keep by law.
• Messages recognised as spam: deleted automatically after 30 days.
• Cookies and cart: see the table above.

Security

The website uses encrypted connections only (HTTPS). The restricted area is accessible only to authorised staff with personal accounts. We make backup copies of the database.

Your rights

• Find out whether we process data about you and receive a copy (right of access, Art. 25 FADP).
• Have inaccurate data corrected and ask for data to be deleted or processing to be restricted.
• Object to processing.
• Receive the data you gave us in a common electronic format or have it transferred to another controller (Art. 28 FADP).

To exercise these rights, write to us using the contact form, by email or on WhatsApp: we usually answer within 30 days. If you believe we process your data improperly, you can contact the Federal Data Protection and Information Commissioner (FDPIC), www.edoeb.admin.ch.

Changes

We update this policy when our services or the rules change. The version published on this page, with the date shown at the top, applies. The terms of sale contain a summary (point 13).