Privacy Policy

1. Introduction

The protection of your personal data is a priority for GAIATEK SA. This policy explains how we collect, use, share and protect your personal information, within the meaning of the Swiss Federal Act on Data Protection (FADP).

2. Data Controller

Company Name: GAIATEK SA

Address: Chemin des Lentillières 14, 1023 Crissier, Suisse

Email: pbls@pointbreak.ch

Phone: +41 21 320 11 35

3. Data Collected

3.1 Automatically Collected Data

Site Navigation

IP Address
Browser Type and Version
Operating System
Pages Visited and Time Spent
Connection Date and Time
Referrer URL

3.2 Voluntarily Provided Data

Customer Account Creation:

First and Last Name
Email Address
Password (encrypted)
Phone Number (optional)

Order and Delivery:

Billing Address
Delivery Address
Payment Information (processed by Postfinance, not stored)

Communication:

Customer Service Emails
Exchange History
Reviews and Comments (if feature enabled)

4. Processing Purposes

Your personal data is collected and processed for the following purposes:

Order Management

• Order Processing and Tracking
• Product Delivery
• Billing and Accounting
• Returns and After-Sales Service Management

Customer Account

• Account Management
• Order History
• Preferences and Settings
• Security and Authentication

Communication

• Transactional Emails (confirmation, shipping)
• Customer Support
• Important Notifications
• Newsletter (with consent)

Service Improvement

• Site Performance Analysis
• Anonymous Statistics
• Bug Detection
• User Experience Optimization

5. Legal Basis for Processing

Our processing is based on the following grounds:

Contract Execution: order processing and delivery
Legal Obligation: billing, accounting (10-year retention)
Consent: newsletter (revocable at any time)
Legitimate Interest: fraud prevention, site security, service improvement

6. Retention Period

Data Type	Retention Duration
Customer account	Until the account is deleted, by you (My Account > Delete My Account) or on request; no automatic deletion for inactivity
Order Data	At least 10 years (accounting retention obligation)
Billing Data	At least 10 years (Swiss legal obligation)
Saved cart (account) or cart left with your email (guest)	No automatic deletion: until the account is deleted, or on request
Server logs	Logins: 90 days; security: 365 days; technical logs: 30 days at most
Cookies	120 minutes (session and security); 30 days for the sign-in cookie, only if you tick "Remember me"; 1 year (_clck) and 1 day (_clsk) for Microsoft Clarity

7. Data Sharing

Your personal data is never sold to third parties. It may be shared with the following service providers, only to the extent necessary:

Infomaniak Network SA (Switzerland): hosting of the website and database, sending of emails (including the newsletter) and backups

PostFinance Ltd (Switzerland): card and TWINT payments (bank details never pass through our servers)

Cloudflare, Inc. (United States): bot protection (Turnstile) on the contact, registration, login, password and payment forms: receives your IP address and technical information about your browser

Microsoft Corporation (United States): audience measurement and anonymised recording of visits (Microsoft Clarity) on every page of the site, including the administration area: receives your IP address, technical information about your browser and your interactions with the pages (clicks, scrolling, movements), without the text typed into forms

Swiss Post, FedEx: delivery of your parcel: name, delivery address and phone number

Odoo: the management software of GAIATEK SA, in which your order (name, addresses, phone number, items) is entered for preparation and invoicing

Transfers outside Switzerland: Cloudflare, Microsoft and FedEx are based in the United States: the data they receive (your IP address when you submit a form, for Cloudflare; your IP address and your interactions with the pages, for Microsoft Clarity; the delivery details of a parcel it carries, for FedEx) may be processed there. Infomaniak and PostFinance process your data in Switzerland.

8. Your Rights

You have the following rights regarding your personal data:

Right of Access

Obtain confirmation that your data is being processed and receive a copy

Right of Rectification

Correct inaccurate or incomplete data

Right to Erasure

Request deletion of your data (except legal obligations)

Right to Portability

Receive your data in a structured, readable format

Right to Object

Object to processing (particularly direct marketing)

Right to Restriction

Request processing restriction in certain cases

How to Exercise Your Rights?

To exercise your rights, log into your account and access:

My Account > Preferences: manage your privacy preferences
My Account > Export My Data: download your data (JSON format)
My Account > Delete My Account: request permanent deletion

Or contact us by email: contact@le-dahu.ch

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

SSL/TLS Encryption: all communications are encrypted (https://)
Passwords: secure hashing with bcrypt (impossible to recover in clear text)
Backups: daily backups, kept in Switzerland by our hosting provider
Updates: system and software regularly updated
Monitoring: access monitoring and intrusion detection
Training: staff trained in data protection

10. Cookies

Our site sets the cookies necessary for it to work: the session cookie (pointbreakch_session), the security cookie (XSRF-TOKEN) and, only if you tick "Remember me" when signing in, the sign-in cookie (remember_web_59ba36addc2b2f9401580f014c7f58ea4e30989d). We also use Microsoft Clarity (Microsoft Corporation) for audience measurement and anonymised session recording, with its cookies _clck (1 year) and _clsk (1 day). No advertising or social media cookies.

For more information: Cookie Policy

11. Minors

Our site is intended for adults. If you are under 18, you must obtain permission from your parents or legal guardians before creating an account or placing an order.

12. Policy Modifications

We reserve the right to modify this privacy policy at any time. Modifications will be published on this page with a new update date. We encourage you to regularly consult this page.

In case of substantial modifications, you will be notified by email or via a notification on the site.

13. Complaints

If you believe your rights are not being respected, you can file a complaint with:

Federal Data Protection and Information Commissioner (FDPIC)

Feldeggweg 1, 3003 Bern, Switzerland

Website: www.edoeb.admin.ch

14. Contact

For any questions regarding this privacy policy or the processing of your data:

Data protection contact

Email: contact@le-dahu.ch