Privacy

Privacy policy

We process personal data only to the extent necessary for online ordering, payment handling, security, support, quality assurance, and legal obligations.

Data processed

This includes contact and identification details, address data, order status, uploaded documents, the digital signature, payment references, and technical security data such as IP address and timestamps.

Purposes

Your data is used to process and securely provide your debt-register extract. This includes identifying the responsible debt-enforcement office, preparing and processing your request, checking submitted documents for completeness and technical security, confirming payment, securely providing the documents you ordered, and handling support requests where necessary.

Payment references and a transaction status limited to what is necessary are also used to prepare refunds securely, approve them under the four-eyes principle, verify them with the payment provider, and prevent duplicate refunds. Payment-provider references are not displayed in the public or protected order status.

We do not sell order, identity-document or debt-enforcement data, and we do not use it to create credit profiles.

Recipients

Depending on the step, data may be transmitted to the secure processing service, the responsible authority, Datatrans, and the hosting, security, email, and support providers required to complete the order.

Order communications through WhatsApp and other channels

When you submit the order and accept the terms, we record ALLOWED for the normalised mobile number, our partner context, and the CASE_LIFECYCLE purpose together with the policy version, evidence reference, and timestamp. This enables operational information about payment, processing, security, and delivery by email, WhatsApp, SMS, telephone, or postal mail. It does not authorise marketing. For WhatsApp delivery, the phone number and message-related metadata are transmitted to the WhatsApp service; processing abroad may occur subject to applicable data-protection safeguards. STOP ends and START reactivates WhatsApp messages.

Cookies and local storage

Essential cookies and browser local storage are required for security, nonces, order progress, payment return, and language preferences. Optional analytics or marketing cookies are activated only after consent.

Google Analytics, Google Ads, and Tag Manager

Google Analytics 4, Google Ads, and Google Tag Manager may be used to measure reach, manage campaigns, and improve the order journey. Google tags are integrated with Consent Mode v2. Analytics and advertising storage remains disabled until you consent to optional cookies.

After consent, measurements may include technical usage data, page views, order-journey steps, and a SMART-confirmed paid order as a conversion. Email addresses, phone numbers, names, postal addresses, affected-person or company details, card data, identity documents, uploads, raw order data, and result content are not sent to Google. Enhanced conversions, Customer Match, purchaser remarketing, and customer-derived audiences are disabled.

Retention

Incomplete orders and related uploads are retained for no more than 48 hours so that entry can be continued and technically secured. For completed orders, high-risk uploads and private processing state are normally deleted after 30 days, operational event context after 90 days, and the remaining order categories required for fulfilment, secure access, support, evidence, security, and legal-rights handling no later than 365 days.

Payment and accounting records are separated and may be kept longer where applicable law requires it. A documented legal hold may temporarily suspend deletion of the affected category. Data is deleted or anonymised when no purpose, retention duty, or legal hold remains.

Your rights

You may request access, correction, deletion, or restriction where no legal or contractual reason prevents it. Contact: support@stn.ch.