1. Controller

The entity responsible for the processing of personal data within the meaning of the revised Swiss Federal Act on Data Protection (revFADP / revDSG) and — where applicable — the EU General Data Protection Regulation (GDPR) is Computer Systeme Schneider, c/o Richard Schneider, Schumacherweg 27, 8046 Zürich, Switzerland, email info@cs-schneider.ch, company identification number UID CHE-174.746.222.
 

2. Scope

This privacy policy explains which personal data CSS processes on the website cs-schneider.ch and in the course of its business activities (sale of PCs and hardware, IT services), for what purposes this is done, and what rights the data subjects have.
 

3. Principles of Data Processing

CSS processes personal data exclusively in accordance with the principles of good faith, lawfulness, proportionality and purpose limitation pursuant to Art. 6 revFADP. Only data that is necessary for the respective purpose is processed; such data is deleted or anonymised as soon as it is no longer required.
 

4. What Data Is Processed

Depending on your interaction with CSS, the following categories of personal data are processed: master data (first and last name, form of address, company), contact data (email address, telephone number, postal and delivery address), contract data (orders, purchased products, individual PC configurations, service orders), payment data (billing address, payment method; the payment processing itself is carried out via external service providers in accordance with Section 8), communication data (the content of emails, contact forms and support enquiries) as well as usage data (IP address, date and time of access, pages accessed, browser type, operating system, referrer URL).
 

5. Purposes of Processing

Processing is carried out to handle orders, deliveries and service orders, to create individual PC configurations and quotes, for invoicing and payment processing, to provide customer support and warranty handling, to fulfil statutory retention and disclosure obligations (in particular under the Swiss Code of Obligations (CO) and the Swiss Value Added Tax Act (VAT Act)), to operate the website and to ensure its security and optimisation, and to provide information about our own products and services, provided that consent or a legitimate interest exists for this purpose.
 

6. Hosting and Server Log Files

The website is operated via the platform Wix.com Ltd., Namal Tel Aviv 40, Tel Aviv 6350671, Israel, as well as its group companies (in particular Wix.com Inc., USA). On behalf of CSS, Wix processes in particular hosting, log and performance data. Data transfers to the USA and to Israel may take place; Israel benefits from an adequacy decision of the EU Commission, while for the USA CSS relies on the Standard Contractual Clauses and on self-certification under the EU-US Data Privacy Framework. Further information is available at https://www.wix.com/about/privacy. Each time the website is accessed, technical data is automatically recorded in server log files (IP address, time stamp, URL accessed, browser, operating system). This data serves operational security, error analysis and protection against misuse.
 

7. Contacting Us

If you contact CSS by email, contact form or telephone, the data you transmit will be processed in order to respond to your enquiry. This data is retained for as long as is necessary to process the enquiry, but no longer than the duration of any statutory retention obligations.
 

8. Orders and Payment Processing

For order processing, CSS collects the necessary data (name, delivery address, billing address, email and, where applicable, telephone number). Depending on the payment method chosen, payment processing is carried out via the following service providers in Switzerland: PostFinance AG, Mingerstrasse 20, 3030 Bern, for PostFinance E-Finance, invoice and credit card payments processed via the payment interface (PostFinance Checkout) of PostFinance AG, and TWINT AG, Konsumstrasse 11, 3007 Bern, for TWINT payments. For payment processing, CSS transmits the necessary payment and contract data to the respective chosen payment service provider. With regard to the processing of payment data, the providers are independently responsible; their data protection provisions additionally apply (PostFinance: https://www.postfinance.ch/datenschutz; TWINT: https://www.twint.ch/datenschutz/). As a rule, payment data is not transferred to countries outside Switzerland in the course of payment processing; an exception applies to the handling of credit card payments via the card networks (e.g. Visa, Mastercard), which is inherent to this payment method.
 

9. Shipping Service Provider

For the dispatch of ordered hardware, CSS transmits the name and delivery address to its logistics partner Die Schweizerische Post AG, Wankdorfallee 4, 3030 Bern. Its data protection provisions additionally apply, available at https://www.post.ch/de/footer/datenschutz.
 

10. Cookies and Similar Technologies

The website uses cookies and comparable technologies. Necessary cookies are required for the operation of the website (e.g. shopping cart, login). Functional and analytics cookies are set only with your consent. You can withdraw your consent at any time via the cookie banner or your browser settings. We use technically necessary cookies (session, shopping cart, language setting) as well as analytics cookies in connection with Google Analytics 4 for the statistical evaluation of website usage (see Section 11).
 

11. Web Analytics

CSS uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (for Swiss and EU users) or by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses cookies and similar technologies to analyse the use of the website (e.g. pages visited, time spent, device and browser information, truncated IP address, region of origin). The information generated by cookies is generally transferred to and stored on a Google server in the USA. Google Analytics is operated with IP anonymisation activated; the IP address is truncated before any storage. A data processing agreement (Data Processing Amendment) is in place with Google. The transfer to the USA is based on Google LLC's self-certification under the EU-US Data Privacy Framework or the Swiss-US Data Privacy Framework, as well as additionally on the Standard Contractual Clauses of the EU Commission. The legal basis is your consent (Art. 31 para. 1 revFADP, Art. 6 para. 1 lit. a GDPR), which you grant via the cookie banner and may withdraw at any time with effect for the future. The storage period of the analytics data in Google Analytics is 14 months. Further information is available at https://policies.google.com/privacy and https://support.google.com/analytics/answer/6004245.
 

12. Social Media

CSS operates profiles on YouTube (Google Ireland Ltd., Ireland / Google LLC, USA), Instagram (Meta Platforms Ireland Ltd., Ireland) and TikTok (TikTok Technology Ltd., Ireland) in order to provide information about products and PC builds. When you visit these profiles or interact with them, the respective providers process personal data on their own responsibility (e.g. IP address, usage behaviour, cookies). CSS has no influence over this processing; the data protection provisions of the respective platform apply (YouTube/Google: https://policies.google.com/privacy; Instagram/Meta: https://privacycenter.instagram.com/policy; TikTok: https://www.tiktok.com/legal/privacy-policy). On the website, content from these platforms is loaded only after your consent via the cookie banner.
 

13. Data Transfers Abroad

Where personal data is transferred to service providers abroad (in particular to the EU/EEA or to the USA), CSS ensures protection by means of appropriate safeguards. This is done in particular on the basis of countries with an adequate level of data protection according to the list of the FDPIC (e.g. EU/EEA states), on the basis of the Standard Contractual Clauses of the European Commission supplemented by the recommendations of the FDPIC, and, in individual cases, on the basis of your explicit consent.
 

14. Disclosure to Third Parties

Your personal data is disclosed to third parties only to the processors named in this policy (hosting, payment, shipping, analytics), to suppliers and manufacturers insofar as this is necessary for order processing (e.g. direct shipment, warranty handling), to authorities where a legal obligation exists, and with your explicit consent. Data is not sold for advertising purposes.
 

15. Retention Period

CSS retains personal data for as long as is necessary for the purposes stated. Contract and business documents are retained for ten years in accordance with Art. 958f CO and the VAT Act. Data from mere enquiries without conclusion of a contract is deleted no later than twelve months thereafter.
 

16. Data Security

CSS takes appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access. In particular, data transmission on the website is encrypted via HTTPS/TLS. Access to customer data is restricted to a narrowly limited group of persons.
 

17. Your Rights

With regard to the personal data stored by CSS, you have the right to information (Art. 25 revFADP), to rectification of incorrect data, to erasure or anonymisation (provided no statutory retention obligation prevents this), to restriction of processing, to object to certain processing, to withdraw consent given with effect for the future, and to data release and data portability (Art. 28 revFADP). To exercise these rights, an informal notification to info@cs-schneider.ch is sufficient; for identification purposes, CSS may request proof of identity. You also have the right to lodge a complaint with the competent supervisory authority. In Switzerland, this is the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, www.edoeb.admin.ch.
 

18. Automated Decisions and Profiling

No automated individual decision-making with legal effect within the meaning of Art. 21 revFADP takes place. Profiling in the narrower sense is not carried out.
 

19. Changes to This Privacy Policy

CSS reserves the right to amend this privacy policy at any time in order to adapt it to changed legal bases or modified services. The version published on the website applies in each case.
 

20. Contact for Data Protection Matters

For questions regarding data processing, you can reach CSS at Computer Systeme Schneider, c/o Richard Schneider, Schumacherweg 27, 8046 Zürich, email info@cs-schneider.ch.