Privacy Policy

Working draft — have a lawyer review this before publication.

Last updated: to be completed at publication.

Who is responsible

ABC Office, Rue de Morges 22, 1023 Crissier, Switzerland

This site is subject to the revised Swiss Federal Act on Data Protection (revDSG). If you live in the European Union, the GDPR may also apply.

What we process

When you order: name, delivery address, email, telephone, order contents, amount and date. This data is necessary to perform the contract.

When you pay: card details are entered directly with Stripe. They never pass through our servers and we cannot see them. We receive only the payment confirmation and a transaction reference.

When you subscribe to the newsletter: email address and language, on the basis of your consent, which you can withdraw at any time.

When you browse: our host records technical logs containing IP address, date and page requested, for security and diagnostics.

We ask for no health data. Please do not send personal medical information through the contact form: we are not a healthcare provider and cannot handle it appropriately.

Why, and on what basis

Fulfilling your order — necessary for the contract
Sending your invoice and confirmation — legal obligation and contract performance
Keeping accounting records — legal obligation, ten years (art. 958f CO)
Answering your questions — legitimate interest
Sending the newsletter — consent

Who receives it

Stripe Payments Europe — payment processing
Infomaniak Network SA, Geneva — website and data hosting
Google Workspace — sending confirmation emails
Swiss Post — delivery, receiving name and address

Stripe and Google may process data outside Switzerland, including in the United States, under appropriate contractual safeguards. We do not sell or rent your data.

How long we keep it

Order data and invoices are kept for ten years, as accounting law requires. Contact form messages are deleted after two years. Newsletter subscriptions are kept until you unsubscribe.

Your rights

You may request access to your data, its correction or deletion, or object to a particular use. Write to order@abc-office.ch; we respond within thirty days.

Deletion cannot apply to data we are legally required to keep, invoices in particular.

You may also complain to the Federal Data Protection and Information Commissioner (FDPIC).

Cookies

See the separate cookie page.

Security

The site is served over HTTPS only. Payments are handled by Stripe, which is PCI-DSS certified. No system is perfect, so we cannot guarantee absolute security.

Changes

This policy may change. The version in force is the one published on this page.