Privacy policy

The controller responsible for data processing on this website is YouFixIt, Monbijoustrasse 8, 3011 Bern, Switzerland. Email: youfixit@reptechnic.ch.

• Order data: name, delivery and billing address, email address, phone number (optional), company (optional), ordered products, amounts and payment method.
• Customer account: name, email address, password (stored only as a secure hash), saved addresses and order history.
• Contact enquiries: the details you enter in the contact form and our correspondence with you.
• Payment data: for online payments, card and TWINT details are entered directly with PostFinance. We do not receive or store full card numbers; we only receive the payment status and a transaction reference.
• Technical data: IP address, browser type, date and time of access, collected in server logs to operate and protect the website.
• Preferences stored in your browser: language, shopping cart and recently viewed products (see our cookie policy).

• Processing and delivering your orders, payment handling and customer service (performance of the contract).
• Managing your customer account if you create one (performance of the contract).
• Answering your enquiries (our legitimate interest in communicating with customers).
• Sending emails about restocks and new devices only if you opted in at checkout; you can withdraw your consent at any time (consent).
• Accounting and statutory retention obligations (legal obligation).
• Security of the website, prevention of fraud and misuse (legitimate interest).

We do not use your data for automated individual decision-making or profiling, and we never sell personal data.

We only share personal data where necessary for the purposes above, with:

• Swiss Post or the selected carrier, to deliver your parcel (name, address, phone where required).
• PostFinance AG, Bern, for online payments.
• IT service providers who host the website, the database (MongoDB Atlas) and product images (DigitalOcean Spaces), and our email service provider. They process data only on our behalf and under contractual confidentiality and security obligations.
• Authorities, where we are legally obliged to do so.

Some IT service providers may process data outside Switzerland, including in the EU/EEA or the USA. Transfers take place only to countries with adequate data protection or on the basis of appropriate safeguards, in particular the standard contractual clauses recognised by the Federal Data Protection and Information Commissioner (FDPIC).

We keep personal data only as long as required for the purposes above. Order and accounting records are kept for 10 years in accordance with Art. 958f CO. Account data is kept until you delete your account; enquiries are deleted once they are resolved and no longer needed. Server logs are deleted after a short period.

We use appropriate technical and organisational measures to protect your data, including TLS encryption for all connections, hashed passwords, access restrictions and regular updates.

Subject to the applicable law you have the right to:

• request information about the data we hold about you;
• have incorrect data corrected;
• have your data deleted or its processing restricted;
• receive your data in a common electronic format (data portability);
• object to processing based on legitimate interests and withdraw consent with effect for the future.

To exercise your rights, contact youfixit@reptechnic.ch. You may also lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC), www.edoeb.admin.ch, or — if you are in the EU/EEA — with your local supervisory authority.

We may update this privacy policy. The version published on this page applies.