Privacy
Controller
DD Tuning. Contact: the contact details on the Imprint page.
What we collect
Quote requests: your name, email, phone, your car and your message. Orders: name, email, phone, shipping address and country, the items, the amount, the payment method and status, and when you accepted these terms.
Card details go straight to Stripe and never reach us. Our host keeps technical server logs (IP address, time, page requested) for security, for a short period.
Why, and on what basis
To answer your request and to conclude and fulfil your order (GDPR Art. 6(1)(b)); to keep accounting and tax records (Art. 6(1)(c)); to keep the site secure (Art. 6(1)(f), our legitimate interest). We do not sell your data, use it for advertising or make automated decisions about you.
Who receives it
Our hosting provider, our email provider, Stripe (card payments), the courier (name, address and phone for delivery) and customs authorities where an export requires it. Our IT and accounting service providers may see data when they work for us; all of them are bound to confidentiality.
Some of these providers process data outside Switzerland, including in the EU and the USA. We transfer data only to countries the Swiss Federal Council recognises as adequate, to US companies certified under the Swiss-US and EU-US Data Privacy Framework, or under the standard contractual clauses.
How long we keep it
Quote requests that do not lead to an order are deleted after 12 months. Orders, invoices and the related correspondence are kept for 10 years, as Swiss accounting law requires (Art. 958f Code of Obligations).
Cookies and storage
See the Cookies page. We use no tracking or advertising cookies unless you accept them in the cookie banner.
Your rights
You can ask for access to your data, correction, deletion, restriction, a copy in a portable format, or object to how we use it, and withdraw consent at any time, at the contact details on the Imprint page.
You can complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC, edoeb.admin.ch) or, if you live in the EU/EEA or UK, to the data protection authority of your country.