Legal

Privacy Policy

Last updated: 4 November 2026

This privacy policy informs you about which personal data we process in connection with the online shop tecdoor.shop, for what purposes, and to whom we disclose it. It is based on the Swiss Federal Act on Data Protection (FADP), which has been in force since 1 September 2023. Where the EU General Data Protection Regulation (GDPR) applies in individual cases – for example for deliveries to Liechtenstein as an EEA state – we additionally state the corresponding legal bases.

1. Controller and contact

For data protection matters, you can contact us at info@tecdoor.ch. We have not appointed a data protection advisor (optional under Art. 10 FADP). We operate exclusively in Switzerland and do not direct our offering at persons in the EU or EEA; a representative under Art. 27 GDPR has therefore not been appointed.

2. What data we process

Order data

Name, company, delivery and billing address, email address, telephone number, items ordered, prices, selected shipping and payment method, order history and, where applicable, details of booked installation or service appointments.

Customer account

Login data (we store the password only as a cryptographic hash value), master data, saved addresses, details under «My installation» (e.g. door operator, hand transmitter type) and, for business customers, terms and conditions and approval for purchase on account.

Payment data

Payment method, transaction reference, amount and payment status. Card and account details are captured directly by the payment service provider; TECDOOR does not receive or store complete card details.

Communication

Content of emails, enquiries, return and warranty notifications, and notes of telephone calls.

Technical data

IP address, date and time of access, pages accessed, browser and system information, error messages (server logs) and the cookie data described under Cookies.

3. Purposes and legal bases

Under Swiss law, we process personal data in accordance with the principles of Art. 6 FADP; a specific legal basis is required only in the cases provided for by law. We send advertising emails only if you have consented or if, as a customer, you have purchased similar products and have not objected (Art. 3 para. 1 let. o UCA); you can unsubscribe at any time.

4. Recipients and processors

We disclose personal data only insofar as this is necessary for the purposes stated. Processors are contractually obliged to process the data only in accordance with our instructions and with appropriate security.

5. Storage location and disclosure abroad

Storage location Switzerland: The online shop, orders, customer accounts and our ERP are operated in data centres in Switzerland (Microsoft Azure, region Switzerland North). Payment data is processed by Datatrans AG in Switzerland (TWINT); card payments and wallets are processed by Stripe in the EU and the USA. Shipping data is processed by Swiss Post Ltd in Switzerland.

The online shop data is stored in Switzerland. Microsoft is a group headquartered in the USA; it therefore cannot be ruled out that US authorities may demand access to data on the basis of US law. Microsoft Corporation is certified under the Swiss-U.S. Data Privacy Framework, for which the Federal Council has determined an adequate level of data protection. In addition, there are contractual safeguards (standard contractual clauses). Where data is disclosed to other states without an adequate level of data protection, we rely on standard contractual clauses or on an exception under Art. 17 FADP, for example where the disclosure is necessary for the performance of the contract.

6. Cookies

We use technically necessary cookies for the shopping cart, checkout process, login, your cookie choice and the protection of forms (antiforgery). Before you give your consent, only these necessary cookies are set and no analytics or advertising services are loaded. Only if you choose «Accept all» do we load our visitor analytics «Besucherradar». We evaluate which pages are viewed, for how long, where visitors come from and which links are clicked. Based on the IP address, we use public registers (RIPE, reverse DNS) to determine whether the visit comes from a company network and store only the company’s name. If you submit a form, we only take the domain of your email address (e.g. «company.ch») to identify the company. If you click a personal link in an email from us, we assign the subsequent visit to your contact. To improve our site, we record the course of a visit (page structure, mouse, scrolling, clicks); entries in form fields are always made unreadable, and with «Do Not Track» or «Global Privacy Control» we record nothing. The analytics are never active in checkout, the customer account, order status and payment, nor for logged-in customers. We do not store the IP address, and Besucherradar sets no cookies. The data is held with Microsoft Azure in Switzerland; recordings are deleted after 30 days, other data after 13 months. You can object at any time via the cookie settings or at info@tecdoor.ch. Your choice of language (German, French, Italian or English) is derived from the address of the page and is not stored in a cookie. You can give or withdraw your consent at any time under Cookie Settings. There you will also find a list of all cookies with their storage period.

Google Analytics (only with your consent)

If you choose «Accept all», we additionally load Google Analytics 4 from Google Ireland Ltd. (Dublin) and Google LLC (USA). Google Analytics sets cookies (_ga, _ga_*, stored for up to 2 years) and records pages viewed, interactions such as scrolling, link clicks, searches in the shop and form use (without their content), where visits come from, device information and completed orders (order number, amount and items purchased, no names or addresses) so that we can measure the effectiveness of our advertising. Google Analytics 4 does not store full IP addresses; analytics data is kept for a maximum of 14 months. Data may be transferred to the USA; Google LLC is certified under the Swiss-U.S. Data Privacy Framework. Google Analytics is never active in checkout, the customer account and payment, nor for signed-in customers. With «Necessary only», Google Analytics stays off. Legal basis: consent (Art. 6(1)(a) GDPR), which you may withdraw at any time.

7. Retention

We retain personal data for as long as is necessary for the purposes or required by law. We retain business records, accounting vouchers and business correspondence such as orders and invoices for ten years (Art. 958f CO). We delete server logs after 30 days. If you request a reminder of your cart at checkout, we store your email address, first name and cart for this purpose and send at most one email; this data is deleted when you order, otherwise after 7 days at the latest. You can have your customer account deleted at any time; data subject to statutory retention obligations will then be blocked and deleted once the retention period has expired.

8. Data security

We take appropriate technical and organisational measures to protect your data, in particular encrypted transmission (HTTPS/TLS), encrypted storage of sensitive order details, access restrictions on a need-to-know basis, password hashing and regular data backups. However, absolute security cannot be guaranteed for data transmission over the internet.

9. No automated individual decisions

We do not make any decisions based exclusively on automated processing that have legal consequences for you or significantly affect you (Art. 21 FADP).

10. Your rights

Within the scope of applicable law, you have in particular the following rights:

• Access to information on whether and which personal data we process about you (Art. 25 FADP)
• Rectification of inaccurate data
• Erasure or destruction, unless a retention obligation applies
• Data release or portability in a common electronic format (Art. 28 FADP)
• Objection to certain processing, in particular for advertising purposes, and withdrawal of consent with effect for the future

The easiest way to submit your request is via our form Request access to or erasure of data; you can also send it in writing to the address above. To ensure that no data reaches unauthorised persons, we verify your identity (usually via the email address stored with us, and if necessary with a copy of an identity document). We respond within 30 days (Art. 25 para. 7 FADP, Art. 18 DPO); information is generally provided free of charge.

11. Right to lodge a complaint

You may contact the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, www.edoeb.admin.ch, at any time. If the GDPR applies, you may also lodge a complaint with the competent supervisory authority of your country of residence, for Liechtenstein with the Data Protection Authority of Liechtenstein (Datenschutzstelle Liechtenstein).

12. Changes

We may amend this privacy policy at any time, for example in the case of new functions or service providers. The current version published on this page applies.

See also: GTC, Legal Notice.