Privacy Policy

Privacy Policy of purecrea GmbH

1. Controller

The controller responsible for data processing is:

purecrea GmbH
Talstrasse 4
4586 Kyburg-Buchegg, Switzerland

2. General information on data processing

We process personal data (e.g. name, address, e-mail, IP address) in accordance with the Swiss Federal Act on Data Protection (FADP) and – where applicable – the EU General Data Protection Regulation (GDPR).

Processing is carried out only for the purposes specified in this policy.

3. Purposes of data processing

Order processing: handling of your information for the performance of a contract (e.g. shipping, invoicing).

Operation of the website and online systems: processing of technical data (e.g. IP address, browser type) for stability and security.

Customer communication: responding to inquiries via contact form, e-mail or telephone.

Newsletter (if subscribed): sending of information and offers (opt-in).

Optimization & analysis: anonymous evaluation to improve our services.

4. Types of data processed

Order data: name, address, delivery address, payment information.

Communication data: e-mail, telephone number, support requests.

Access data: username, password (stored in encrypted form).

System data: IP address, browser, access data (logs).

5. Legal bases

Performance of a contract (Art. 6 para. 1 lit. b GDPR / Art. 31 FADP): for orders and customer accounts.

Consent (Art. 6 para. 1 lit. a GDPR / Art. 6 FADP): e.g. for the newsletter (opt-in).

Legitimate interest (Art. 6 para. 1 lit. f GDPR): IT security, analysis, optimization.

6. Disclosure of data

We only disclose your data if this is necessary for the performance of a contract (e.g. to shipping providers, payment providers) or if there is a legal obligation to do so.

Our technical service providers (e.g. hosting in Switzerland, payment providers, shipping companies) only receive data as part of commissioned processing and are contractually obliged to ensure data security.

7. Storage and deletion

Contract and order data are retained in accordance with statutory retention obligations (generally 10 years).

Support requests and communication data are deleted once they are no longer needed.

Server logs are generally automatically deleted after 30 days.

8. Data security

We implement technical and organizational measures to protect your data against loss, manipulation or unauthorized access:

SSL/TLS encryption of the website

Access restrictions and role management

Encrypted storage of sensitive data

Regular backups

9. Rights of data subjects

You have the right at any time to:

Access information about your stored data

Rectify incorrect data

Restrict processing

Data portability

Object to certain processing activities

Note on deletion:

A complete deletion of your data is not possible within the framework of statutory retention obligations.

In particular, under Swiss Code of Obligations (Art. 957 ff. CO) and the Anti-Money Laundering Act (AMLA), accounting and business documents must be retained for at least 10 years.

After these periods have expired, the data will be deleted or anonymized.

10. Cookies & tracking

Our website uses cookies to facilitate usage and provide certain functions.

Necessary cookies: for shopping cart, login, order.

Optional / analytics cookies: e.g. Google Analytics (if active). These cookies are only set with your consent.

You can delete or block cookies at any time via your browser settings.

11. Newsletter

If you subscribe to our newsletter, we use your e-mail address solely to send our offers and information.
You can unsubscribe at any time via your account settings or by e-mail to support@bastelgarage.ch.

12. Changes to this policy

We reserve the right to amend this privacy policy in the event of technical or legal changes.
The current version can be found at any time at https://www.bastelgarage.ch/privacypolicy