Last modified: 14.03.2025 6:09 AM

Privacy policy

The purpose of this data protection declaration is to inform you about the processing of your personal data in connection with the use of the webshop smartcityswiss.com.

Who processes your personal data?

The data controller is Smart City Swiss SA, Rue des Vorziers 8, 1920 Martigny, Switzerland.

You can contact us:

We have appointed a data protection consultant.

What data do we process about you?

We collect the following data directly from you, mainly through the webshop:

  • Identity (first name, surname, date of birth, gender). This data is kept for at least 10 years after the end of the contractual relationship, for legal reasons or as evidence pending the expiry of applicable limitation periods.
  • Contact details (billing and delivery postal addresses, e-mail addresses, private or business telephone numbers, name or business name of the organization you represent). This data is kept for 10 years after the end of the contractual relationship, for legal reasons or as evidence pending the expiry of applicable limitation periods.
  • Invoicing (invoice amounts and due dates, reminders, receipts, products and services ordered, purchase history). This data is kept for at least 10 years after the end of each accounting period, in accordance with Art. 958f of the Swiss Code of Obligations.
  • Correspondence (e-mail exchanges, telephone call logs, postal mail). This data is kept for at least 10 years after the end of the contractual relationship, for legal reasons or as evidence pending the expiry of applicable limitation periods.
  • Technical data (IP address, timestamp, other unique identifiers). This data is kept for 12 months after collection, for technical and security reasons.

For what purposes do we process your data?

We process your personal data in order to:

  • enter into contractual relations, perform them in accordance with the provisions of the contracts and general terms and conditions of sale, invoice services and deliver ordered products;
  • communicate with you by any appropriate means of communication in order to answer your questions about our services, to offer you our products and services and our assistance, and to register claims and complaints;
  • send you commercial or promotional (marketing) communications through the channels you have chosen; you may, at any time, object free of charge to processing for marketing purposes;
  • share your data with our partners and service providers;
  • improve our services, products and commercial activities through market research and satisfaction surveys;
  • plan our business activities; statistics;
  • check that our activities comply with applicable legislation and internal regulations;
  • analyze risks, detect abuse, implement safety measures and check that these measures are effective;
  • respond to your questions and requests relating to data protection, in particular when you wish to exercise one of your rights under the law.

What are the legal bases for processing your data?

Most of the processing operations we carry out are strictly necessary for the conclusion, performance and settlement of contracts with you. Without such processing, we cannot guarantee the services we undertake to provide under the contracts.

Other processing operations are based on our legitimate interests or those of third parties. This applies in particular to processing for marketing, security, statistical and market research purposes. The same applies to the defence of our interests in legal proceedings and the management of disputes, particularly those that do not have a contractual basis.

Certain processing operations may be required by Swiss or foreign law. If they are not directly imposed by law, they will be based on our legitimate interest in complying with the legal provisions applicable to us.

Your consent will also be used as a basis when it is necessary (e.g. for certain processing operations for marketing purposes). In such cases, we will specifically inform you of the processing operations requiring your consent, and you will remain free to decide whether or not to give it. We will inform you of the consequences if you refuse to give your consent. When you give your consent, you remain free to withdraw it at any time, without justification and in a simple manner. Withdrawal is valid for the future and does not retroactively affect any processing carried out up to the time of withdrawal. The processing to which the withdrawal of consent relates will cease immediately unless it can be continued on another legal basis (e.g. our legitimate interest).

Do we make automated individual decisions about you?

No.

Is your data used for profiling?

No.

Who do we share your data with?

As part of your contractual relationship with us and for the other purposes mentioned in 15 above, we may communicate all or part of your personal data to the following recipients:

  • Contractual partners. We collaborate with contractual partners, in particular, to produce and deliver the products ordered. We therefore only provide them with the personal data concerning you that is absolutely necessary for the provision of their services.
  • Service providers. We work with various service providers who enable us to carry out certain data processing and other activities. These include IT service providers, address verification services, debt collection services, transport companies, advertising agencies and financial service providers (e.g. banks, insurers, financial intermediaries, online payment services). These service providers may act on our instructions as subcontractors, as joint processors if they work directly with us on certain processing operations, or as independent data processors if we communicate the data to them so that they can process it for their own purposes.
  • Authorities. When we are obliged to do so by law, when we have the right to do so or when it is in our interests to do so, we communicate your personal data to Swiss or foreign authorities.

Do we transfer your data abroad?

We may work with service providers and partners who are not located in Switzerland. We may transfer certain personal data when this is necessary for the purposes described in section 15 above and complies with the applicable legal framework.

We also use IT services provided by foreign service providers. We make every effort to store data in Switzerland, but sometimes this is not possible. In such cases, we give preference to countries within the European Economic Area and to countries offering an adequate level of protection. 

We will transfer personal data:

  • In Germany, because the servers hosting the webshop are located there;
  • In Poland, for technical or operational reasons (notably IT development) ;
  • In the country to which you ask us to deliver an order.

Finally, we would like to remind you that due to the technical rules governing the operation of the network, the transmission of personal data over the Internet between persons or entities located in the same country may transit through other countries. These transits are beyond our control.

How long do we keep your data?

We process your personal data for as long as required for the purposes of each processing operation. These purposes include legal retention obligations as well as self-defined retention periods to protect our own interests (corporate governance, documentation and safeguarding of evidence). In all cases, once all retention periods have expired, your personal data is either anonymized or destroyed.

Specific retention periods are indicated in section 14 above for each category of personal data. However, these periods may be extended for technical reasons when the data in question is stored on our long-term backup system. In this case, we take all security measures to restrict access to backups to a very limited number of people and to limit data processing to simple storage. We also undertake to irretrievably destroy the data in the backups as soon as technically possible.

The data you provide when creating your webshop account and which are linked to your account will be kept until your account is deleted.

How do we protect your data?

The technical, organizational and legal measures necessary to preserve the security and confidentiality of your personal data are taken in particular according to the risks presented to you by the processing carried out and the sensitive or non-sensitive nature of the data concerned.

We are constantly striving to improve these measures in order to preserve the security of your personal data.

What are your data protection rights?

Your rights concerning your personal data include those of :

  • request information about your personal data that we process and a copy of said data;
  • ask us to correct or complete incorrect or incomplete data;
  • ask us to delete your data, unless, for example, a legal basis or our legitimate interest obliges or authorizes us to keep your data for a longer period of time;
  • ask us to restrict the processing of your data;
  • to inform us at any time of the revocation of your consent to the processing of data for which your consent was requested;
  • inform us at any time if you object to the processing of your personal data for promotional and advertising purposes;
  • notify us at any time of your opposition to any further processing, unless for example a legal basis or our legitimate interest obliges or authorizes us to continue the processing;
  • ask us for your data in a portable format when your data is processed automatically based on your consent or a contract;
  • contact the FDPIC (where processing falls under the DPA) or a supervisory authority in an EEA country (where processing falls under the GDPR) when you wish to dispute the way we process your data or your request to exercise your rights, respectively to lodge a whistleblower or complaint.

We will inform you of any conditions or restrictions that may apply to the exercise of your rights.

You can exercise your rights by contacting us directly (see section 13 above). We reserve the right to request additional information to identify you, in particular a copy of a valid official identity document. To facilitate the processing of your request, we would also ask you to state precisely which right(s) you wish to assert, and to what extent.

In order to reduce paper waste when you request a copy of your personal data, we will make them available to you in digital format. In addition, please note that under the applicable legal provisions, we may ask you for a fair financial contribution (up to CHF 300) if your request involves disproportionate effort. You will be informed of this in advance to enable you to take a position.

When do we update this declaration?

This declaration may be updated at any time. The version published here, on our website, constitutes the most recent version and is authoritative. It replaces any general data protection clauses that precede or contradict this declaration. We will inform you by e-mail of any updates to this declaration.

Martigny, 19.10.2024The purpose of this data protection declaration is to inform you about the processing of your personal data in connection with the use of the webshop smartcityswiss.com.

Who processes your personal data?

The data controller is Smart City Swiss SA, Rue des Vorziers 8, 1920 Martigny, Switzerland.

You can contact us:

We have appointed a data protection consultant.

What data do we process about you?

We collect the following data directly from you, mainly through the webshop:

  • Identity (first name, surname, date of birth, gender). This data is kept for at least 10 years after the end of the contractual relationship, for legal reasons or as evidence pending the expiry of applicable limitation periods.
  • Contact details (billing and delivery postal addresses, e-mail addresses, private or business telephone numbers, name or business name of the organization you represent). This data is kept for 10 years after the end of the contractual relationship, for legal reasons or as evidence pending the expiry of applicable limitation periods.
  • Invoicing (invoice amounts and due dates, reminders, receipts, products and services ordered, purchase history). This data is kept for at least 10 years after the end of each accounting period, in accordance with Art. 958f of the Swiss Code of Obligations.
  • Correspondence (e-mail exchanges, telephone call logs, postal mail). This data is kept for at least 10 years after the end of the contractual relationship, for legal reasons or as evidence pending the expiry of applicable limitation periods.
  • Technical data (IP address, timestamp, other unique identifiers). This data is kept for 12 months after collection, for technical and security reasons.

For what purposes do we process your data?

We process your personal data in order to:

  • enter into contractual relations, perform them in accordance with the provisions of the contracts and general terms and conditions of sale, invoice services and deliver ordered products;
  • communicate with you by any appropriate means of communication in order to answer your questions about our services, to offer you our products and services and our assistance, and to register claims and complaints;
  • send you commercial or promotional (marketing) communications through the channels you have chosen; you may, at any time, object free of charge to processing for marketing purposes;
  • share your data with our partners and service providers;
  • improve our services, products and commercial activities through market research and satisfaction surveys;
  • plan our business activities; statistics;
  • check that our activities comply with applicable legislation and internal regulations;
  • analyze risks, detect abuse, implement safety measures and check that these measures are effective;
  • respond to your questions and requests relating to data protection, in particular when you wish to exercise one of your rights under the law.

What are the legal bases for processing your data?

Most of the processing operations we carry out are strictly necessary for the conclusion, performance and settlement of contracts with you. Without such processing, we cannot guarantee the services we undertake to provide under the contracts.

Other processing operations are based on our legitimate interests or those of third parties. This applies in particular to processing for marketing, security, statistical and market research purposes. The same applies to the defence of our interests in legal proceedings and the management of disputes, particularly those that do not have a contractual basis.

Certain processing operations may be required by Swiss or foreign law. If they are not directly imposed by law, they will be based on our legitimate interest in complying with the legal provisions applicable to us.

Your consent will also be used as a basis when it is necessary (e.g. for certain processing operations for marketing purposes). In such cases, we will specifically inform you of the processing operations requiring your consent, and you will remain free to decide whether or not to give it. We will inform you of the consequences if you refuse to give your consent. When you give your consent, you remain free to withdraw it at any time, without justification and in a simple manner. Withdrawal is valid for the future and does not retroactively affect any processing carried out up to the time of withdrawal. The processing to which the withdrawal of consent relates will cease immediately unless it can be continued on another legal basis (e.g. our legitimate interest).

Do we make automated individual decisions about you?

No.

Is your data used for profiling?

No.

Who do we share your data with?

As part of your contractual relationship with us and for the other purposes mentioned in 15 above, we may communicate all or part of your personal data to the following recipients:

  • Contractual partners. We collaborate with contractual partners, in particular, to produce and deliver the products ordered. We therefore only provide them with the personal data concerning you that is absolutely necessary for the provision of their services.
  • Service providers. We work with various service providers who enable us to carry out certain data processing and other activities. These include IT service providers, address verification services, debt collection services, transport companies, advertising agencies and financial service providers (e.g. banks, insurers, financial intermediaries, online payment services). These service providers may act on our instructions as subcontractors, as joint processors if they work directly with us on certain processing operations, or as independent data processors if we communicate the data to them so that they can process it for their own purposes.
  • Authorities. When we are obliged to do so by law, when we have the right to do so or when it is in our interests to do so, we communicate your personal data to Swiss or foreign authorities.

Do we transfer your data abroad?

We may work with service providers and partners who are not located in Switzerland. We may transfer certain personal data when this is necessary for the purposes described in section 15 above and complies with the applicable legal framework.

We also use IT services provided by foreign service providers. We make every effort to store data in Switzerland, but sometimes this is not possible. In such cases, we give preference to countries within the European Economic Area and to countries offering an adequate level of protection. 

We will transfer personal data:

  • In Germany, because the servers hosting the webshop are located there;
  • In Poland, for technical or operational reasons (notably IT development) ;
  • In the country to which you ask us to deliver an order.

Finally, we would like to remind you that due to the technical rules governing the operation of the network, the transmission of personal data over the Internet between persons or entities located in the same country may transit through other countries. These transits are beyond our control.

How long do we keep your data?

We process your personal data for as long as required for the purposes of each processing operation. These purposes include legal retention obligations as well as self-defined retention periods to protect our own interests (corporate governance, documentation and safeguarding of evidence). In all cases, once all retention periods have expired, your personal data is either anonymized or destroyed.

Specific retention periods are indicated in section 14 above for each category of personal data. However, these periods may be extended for technical reasons when the data in question is stored on our long-term back-up system. In this case, we take all security measures to restrict access to backups to a very limited number of people, and to limit data processing to simple storage. We also undertake to irretrievably destroy the data in the backups as soon as technically possible.

The data you provide when creating your webshop account and which are linked to your account will be kept until your account is deleted.

How do we protect your data?

The technical, organizational and legal measures necessary to preserve the security and confidentiality of your personal data are taken in particular according to the risks presented to you by the processing carried out and the sensitive or non-sensitive nature of the data concerned.

We are constantly striving to improve these measures in order to preserve the security of your personal data.

What are your data protection rights?

Your rights concerning your personal data include those of :

  • request information about your personal data that we process and a copy of said data;
  • ask us to correct or complete incorrect or incomplete data;
  • ask us to delete your data, unless, for example, a legal basis or our legitimate interest obliges or authorizes us to keep your data for a longer period of time;
  • ask us to restrict the processing of your data;
  • to inform us at any time of the revocation of your consent to the processing of data for which your consent was requested;
  • inform us at any time if you object to the processing of your personal data for promotional and advertising purposes;
  • notify us at any time of your opposition to any further processing, unless for example a legal basis or our legitimate interest obliges or authorizes us to continue the processing;
  • ask us for your data in a portable format when your data is processed automatically based on your consent or a contract;
  • contact the FDPIC (where processing falls under the DPA) or a supervisory authority in an EEA country (where processing falls under the GDPR) when you wish to dispute the way we process your data or your request to exercise your rights, respectively to lodge a whistleblower or complaint.

We will inform you of any conditions or restrictions that may apply to the exercise of your rights.

You can exercise your rights by contacting us directly (see section 13 above). We reserve the right to request additional information to identify you, in particular a copy of a valid official identity document. To facilitate the processing of your request, we would also ask you to state precisely which right(s) you wish to assert, and to what extent.

In order to reduce paper waste when you request a copy of your personal data, we will make them available to you in digital format. In addition, please note that under the applicable legal provisions, we may ask you for a fair financial contribution (up to CHF 300) if your request involves disproportionate effort. You will be informed of this in advance to enable you to take a position.

When do we update this declaration?

This declaration may be updated at any time. The version published here, on our website, constitutes the most recent version and is authoritative. It replaces any general data protection clauses that precede or contradict this declaration. We will inform you by e-mail of any updates to this declaration.

Martigny, 19.10.2024